Default everywhere. A bit over 'over-spec', good design and getting rid of traditional VOIP goes a long way to making everyone's life just a little easier 😆 ... View more

Our deployment is the older version. It cannot be changed due to a resource lock. We plan to shut down the old VMX, generate a new enrollment token, deploy a new VMX from the Azure marketplace and enroll it using the existing license. Can anyone confirm that (1) this is the right sequence and (2) that the existing license will transfer to the new deployment without issue? Any tips or tricks I should consider?  ... View more

I will try to keep up ! 😅 ... View more

Thank you! Was hoping for some progress in that firmware 😉 ... View more

So, where you have created the SSIDs. ... View more

Has the VPN policies created this problem or did you never have connectivity to the Hub servers in the first place? ... View more

If your authentication methods have been migrated to "Modern" (which you cannot stop), you cannot use username/password authentication.  You can only use certificate authentication.   This is because the modern authentication method FORCES the use of MFA.  It is not possible to create a conditional access policy to prevent it. ... View more

I'm sorry I couldn't resist. 😂 ... View more

I would LOVE for this to be available. ... View more

Then you can do the normal upgrade process without having to reinstall vMX without any problems. ... View more

We've noticed a big issue with Apple Mobile device where the captive portal can't be closed to authenticate with MFA. Even text messages won't come through due to the phone thinking it has wifi and trying to retrieve text that way. They bypass solution was to connect to the network > get the splash page > cancel sign in and choose "use without internet". > Then you can open a normal safari window and navigate to "captive.apple.com" and sign in normally. This utilized cookies and doesn't close if you switch windows. However thats very clunky.  Aside from that, when we reached the end of our splash page timeout, apple mobile devices will no longer get the splash page to sign in. No amount of forgetting network or trying to manually load the captive page works. User shows not authorized in Meraki. We have a support ticket in for it.    ... View more

Oddly enough my profile has COLOR BLIND ASSIST MODE OFF yet continue to still see the BLUE status colors - so the system/status (color blind assist) is broke.   ... View more

Bear in mind that just because you license devices doesn't mean that they might be supported in 2030, support depends of the model of hardware so if you have older access points by 2030 there is a good chance they won't be supported or compatible with new firmware.  ... View more

You sure?  I haven't caught anything about that. I know about the org-wide GPO since Cisco Live EUR 2024 already. They could just fix the GPO's to apply it statefully on the MX. ... View more

The only downsides to those are your RO admins could see the info, but if you are small enough to not have any background api tools where you could add password management and your password system not have an API where you could easily keep things in sync, that is less likely to matter, certainly seems like a usable workaround. Run your script 1x a week or similar. ... View more

We run tens of them, and no lockups. Our 75's are running newer firmware (19.1/19.2), but never saw it on the older 18.x train. ... View more

Indeed, but it was always listed as 'other' on the dashboard.  I'm not sure the firmware bot knows how to deal with that... ... View more

Solved: Re: Welcome to your AI Assistant - The Meraki Community ... View more

I thing the table settings are new ... View more

Ok adding to this, seems like when someone is connected to the AnyConnect the customer loses connection to the far end of the S2S VPN locally. AnyConnect user doesn't seem to lose connectivity to the S2S VPN at all just local LAN (Wi-Fi) users. Can see lots of logs of DNS failure on the Wi-Fi during that time, DNS server is at the far end of the S2S VPN. Anyone seen anything like this before?    ... View more

I agree that the labelling/messaging is poor on this one.   If you see the Firmware Upgrades feed a couple weeks ago it was released as stable: https://community.meraki.com/t5/Firmware-Upgrades-Feed/A-new-stable-appliance-firmware-is-now-available-on-Thu-31-Jul/ba-p/279413  ... View more

haha yeah, I found it just before you replied 🙂  Thanks. ... View more

Hey, did you test this at all? Was researching VRF's (as I saw it in the org) and was wondering if anyone had tried to implement yet of if any docs had been released ... View more

How are you assigning the 1.1.1.0/29 pool? Is it something that you have picked yourself?   1.1.1.1 is a public-ly routed subnet, so I would very much avoid using that on the WAN interfaces of the MX. Considering also that when Meraki Devices go offline and loose their Uplink Connectivity, they tend to be arp'ing a 1.1.1.1 address.    If you do not have a public routed subnet assigned that you can use, try to stick to RFC1918 addresses.  ... View more