I'm hoping someone can elucidate for me whether this is possible.   How can I achieve multiple(2 or more) redundant paths to our MX250 for internet resolution only?   We have three MS355-24X2 in a Stack Loop. One of these currently has an uplink to the MX250. If this switch has issues, we loose connectivity across every domain.   Given that the MX250 can't speak RSTP is there some way achieve uplink redundancy?   My hope is to provide physical links from each of the three stacked switches directly to the MX. If this isn't possible, I would at minimum like to provide secondary physical connections from downstream PoE switches with all our AP's and Cameras directly to the MX. ... View more

Hello,   We are running a full-stack of Meraki equipment and have a challenge that after months of tests, I have yet to find an ideal solution for.   Our business has two physical locations inside of the same large building. Lets call them Office A and Office B. Office A houses the MX appliance, and all intranet resources. Office B is a remote office that needs high speed(1GbE access) to the resources in Office A.   This building is managed by another organization. We need to bridge our intranet securely between these two locations, however running our own physical cable is not possible or practical. This means passing through their infrastructure.   This other organization has given us a transparent link between the two locations that transits through Cisco Catalyst switches they manage. They have from their side isolated us in our own VLAN so that we're able to broadcast DHCP in Office A, and pickup addresses from wall jacks in Office B (that are passing through their Cisco switches).   The above solution isn't suitable however. They are using significantly out of date iOS version on past EOL switches, and we have lost confidence is giving them this much trust.    Our temporary solution is connecting to this other organizations wifi SSID and then connecting through our MX appliance via Client-to-Site VPN connections. This is really not optimal for all the obvious reasons   I have also tried configuring a Meraki Access Point in Office B with an SSID using the VPN concentration feature. This setup gives us all the 'green lights' that its working, however wireless devices connected to the SSID in Office B are blocked from intranet access. Probably because the Access Port in Office A is configured as 'port isolation: enabled', and the AP is not really doing a VPN connection to the MX because it believes its on the local network already and not at a remote site.   Short of purchasing another MX appliance, do we not have other options? Is there a way to get the AP-to-MX VPN concentrator actually working, despite the physical topology? Are there any encapsulation protocols I should be exploring? Is there a way to get 802.1x based authentication working for multiple remote devices in Office B connecting to an Access Port in Office A, despite transiting over this other organizations infrastructure?     I was sure there was an easy solution to this. If anyone has suggestions or ideas, I'll try them.   Thank you ... View more