^ This is a great write up. ... View more

Hello, I am new to networking and dealing with fiber.   I got nervous when I saw mention of upstream fiber.   If I have multimode fiber as my uplink at a MS250 switch and have a couple of multimode fibers on SFP ports coming out of it, but I want to add one single mode on another one am I going to run into problems?   I have a scenario where I have some good distance to another building and I had requested single mode be pulled. ... View more

Also for visibility,  additive FW rules are immediate.  If you have a FW rule where your are taking away or blocking access, you need to roll the Primary MX.  State / rule change is immediate, spare takes over and processes.  Still have the VPN tunnel / session delay.   ... View more

For those of you keeping track, I reached out Sept 13th for an update and this is the reply:   I've checked the investigation thread but there have not yet been any updates stating that this behavior has been resolved. I will be contacting our MX products team for confirmation of the current state of the investigation and will let you know if any of the recent firmware versions have a resolution for this behavior. Thank you for your patience, Christian Torres Network Support Engineer .ılı.ılı. Cisco Meraki ... View more

I can upgrade from MX15.44 to MX18.107.4 without going to MX18.107 :        Support told me :  "This was previously a bug not a feature but was a bug for so long that it was added to documentation, I believe it has since been resolved and you should be upgrade to the patch version directly."   Which then I asked to rectify the documentation if the firmware barrier is no longer a thing. To be continued.  ... View more

That is not the expected behaviour.  That is a bug.   Make sure the MS are running current stable firmware or better.  If they are, then open a support case. ... View more

Thank you, i will do some testing at the end of the week and let you know how i get on. ... View more

Just in addition to the internet issues we're having.   Since Monday, we did the upgrades on 2 of our sites which connect via SDWAN to each other over the weekend, we've also had multiple issues with people getting corrupted Excel files and connectivity to external servers and ftp sites has also been affected.     Last time we attempted to upgrade to version 17.x a month ago, we had major issues with the VPN so something isn't right with the 17.x updates in regards to our systems.  The VPN issue we had was that the client vpn lost it's DNS name, luckily we had another dns name registered with our DNS supplier that worked fine still but still had to get every vpn client moved over. ... View more

Thank you, i've logged a support request for this.   ... View more

I am removing our whitelisted rule tomorrow, I don't expect any issues. ... View more

That works fine.  Delete away. ... View more

With step 2, is there anyway to automate making that change across multiple laptops?  A powershell or cmd script? ... View more

The most reliable way to deploy it is where the public IP address is directly on each MX.   If you put it behind something else (like an ISP router) that is doing NAT it usually works fairly well - but you are reliant on the NAT implementation on that device.  You tend to experience more reliability issues with this kind of configuration. ... View more

I don't think so.  It's probably easier to take a software inventory on the servers to see what they have installed, and then create the firewall rules based on that. ... View more

I have no access to the roadmap so I couldn't say. Best to make a wish and reach out to your Meraki rep. ... View more

Oh good! Trying the identifier was my next thought. Thanks for the reminder.   I've got a couple clients I need to try it on. ... View more

Hello, thank you for the reply.   OSPF was all enabled but we got the ISP, who looks after the MPLS router and network, to log in as we were doing some testing.  The VPN static route that the MS250s were presenting to the MPLS router through OSPF was being seen as an OSPF External network which was being blocked, so essentially the ISP engineer just had to tick a tickbox to allow external networks and it all started working. ... View more

Thank you.  I'm hoping the plan is to get some of the smaller MX devices at the branch offices as then it'll give us much more visibility in regards to data traffic between sites and any devices that might be flooding the MPLS links, this is something we don't have now as we do sometimes have issues of "over-utilisation" with a couple of devices at our branches with the more basic WAN connections, we have several that struggle to get 2Mb. ... View more

One other comment, note that you can export (download button) the topology to an SVG file and import into Visio.   ... View more

@SimonReach   Glad to hear everything is getting sorted out.   I would observe that the Z1 only does IEEE 802.11n and that both the Z1 and the Z3 only offer the Enterprise Security option, not the Advanced. Personally, I would choose the Z3 over the Z1. For a modem I find the Draytek Vigor 130 to have good throughput and the ability to configure itself to suit the different UK ISPs.   ... View more