Meraki

jimmyt234

You can load balance two WAN connections on a single MX. As of it stands today, high-availability is still only active-passive and not active-active.

jimmyt234

I agree - @RaphaelL is this a service you can provide on release notes going forward please 🤣🤣🤣

jimmyt234

Because you'd want to isolate clients on the same SSID so they cannot access each other????

jimmyt234

Has the VPN policies created this problem or did you never have connectivity to the Hub servers in the first place?

jimmyt234

I believe you've created those firewall policies under the Layer 3 section rather than the site-to-site VPN section.

jimmyt234

Never changed it...

jimmyt234

99.9% of the time we are simply enabling 'Trust incoming DSCP' and that's it.

jimmyt234

Have a look at the layer 2 isolation and outbound rules section on the SSID Firewall & traffic shaping page. Wireless Client Isolation - Cisco Meraki Documentation

jimmyt234

Your understanding is exactly what I was thinking. As you say - client VPNs on other spokes will be different source subnets so not subject to your policies. As with anything, make sure you test after implementation to ensure it is working as desired.

jimmyt234

In this case, as it is all VPN users, I believe you could use the VPN site-to-site outbound firewall policies to restrict your Spoke<>Hub traffic by using the appropriate source/destination IPs. For example your policy could be source of VPN subnet, destination of the list of specific servers, you would then need a deny policy below this (if you don't already have a default deny all). Site-to-site VPN Firewall Rule Behavior - Cisco Meraki Documentation

jimmyt234

A little more information required to give a proper answer: Native Meraki Client VPN or the full Cisco Secure Client? Are you referring to a per-user restriction? EG. User 1 can access Server 1 and User 2 and access Server 2? Or just that all VPN users can only access server 1?

jimmyt234

I fell for it too 🤣🤣😭

jimmyt234

This is only internal to Meraki - no public facing database unfortunately. You could try raising a support ticket and asking questions about a particular bug number.

jimmyt234

The process is the same as upgrading any other Meraki device from the Firmware menu in dashboard. Managing Firmware Upgrades - Cisco Meraki Documentation

jimmyt234

I'm getting a lot of green/blue changes on page load today too

jimmyt234

With co-term I would be waiting until your expiry date before renewing your license. So many things could happen in the next two years which could affect what you need to be purchasing.

jimmyt234

I read that as they have a dedicated VLAN that the other Meraki products are in, a Management VLAN if you will. This would (in theory) only need access to the relevant Meraki dashboard IPs/ports.

jimmyt234

You can have the security center email report on a daily schedule: Security Center - Cisco Meraki Documentation

jimmyt234

We have had to RMA quite a few of this model over the last 12-18 months, but *touch wood* version 19 has been solid and we've not seen any panic's on this firmware.

jimmyt234 · Re: MX 19.1.10 - Promoted to Stable, A Few Fixes

This is the first Stable release for MX 19.1. It contains a variety of new features that expand the MX product line’s connectivity and security capabilities, while also continuing to improve ease of management at scale. Is that true? 19.1.9 was posted to stable by the firmware bot: https://community.meraki.com/t5/Firmware-Upgrades-Feed/A-new-stable-appliance-firmware-is-now-available-on-Thu-31-Jul/ba-p/279413

jimmyt234 · ‎Aug 19 2025

Solved: Re: Welcome to your AI Assistant - The Meraki Community

jimmyt234 · ‎Aug 18 2025

Because.... Meraki! 🤣

jimmyt234 · ‎Aug 18 2025

I agree that the labelling/messaging is poor on this one. If you see the Firmware Upgrades feed a couple weeks ago it was released as stable: https://community.meraki.com/t5/Firmware-Upgrades-Feed/A-new-stable-appliance-firmware-is-now-available-on-Thu-31-Jul/ba-p/279413

jimmyt234 · ‎Aug 18 2025

Yes! But you can select the columns again from the settings cog:

jimmyt234 · ‎Aug 18 2025

19.1.9 is stable, we seem to have 2 stable versions currently. Not sure why it's listed in the other section in the GUI. If you go through the GUI to schedule an upgrade you will see both versions labelled as latest stable:

About jimmyt234

jimmyt234

Community Record

Badges