Agree, I know that the 18.2 train is "new" but when you publish this as a stable release candidate, there is no room for these type of know issues.  I have a hard time understanding how Meraki is willing to play with companies productions network like this.  ... View more

Sorry to say, but I dont agree with you here..    Even do that traffic must go pass the gateway, a better solution would be that you need to allow traffic and not need to deny... since the day of dawn of making normal firewall acl it has been like this.  Could be that this is the reason why fortinet etc has made the solution like this.. Allow never block unless you need to?? 🙂  ... View more

Agree, but most firewalls can do this. 😉 ... View more

Normal recommendation is that you do a cross stack, meaning using 2 stack cables, but you can use it with only 1, but you will miss your redundancy here then.  ... View more

I can follow you on this, but "normal" you would have a default deny between vlan if you are running with acl / firewall rules. But Meraki has choses to make permit any, so you need to make rules that you want to deny traffic here.   Quick example, if you do the same on a Fortinet setup, and you enable the port isolation here, you would have to enable the traffic you allow to the device, and not here where you need to deny traffic from all other vlan even on the same device, simple because you have a default deny rule that state this.  ... View more

What software are you running on the devices??    I was testing the beta version and saw similar issue that you are describing here.  ... View more

Hi Philip    Year I use ISE for a lot of things, but looking more into SAML it might be a idea to use Azure AD..... What option does this give you here? Can you utilize all the feature that there are in Azure AD like, postering, compliance check etc.? ... View more

Thanks for the links, but not really what I am looking for here.   It might be that I need to redo something here to get MFA for Azure to work.   The flow today is the following:   ASA - Cisco ISE - Azure MFA  - The radius request is sent to my Cisco ISE, that handles the request to our Azure MFA setup.  The condition here in ISE and my policy looks like this:  Here use the Cisco-VPN3000/ASA/PIX7x-Tunnel-Group that the ASA sends to ISE to trig the Azure MFA function, but what is Meraki sending??    I need to trig the same function inside ISE here. but what is Meraki using here??    So it might be more the ISE condition I need help with, because Meraki is very simple here on what you can setup in the dashboard. 🙂    So is hoping somebody else has setup Anyconnect with ISE and some MFA. 😄    Frank ... View more

Option 2 works for a csv file, but not the first one. 🙂    I can do it when I run the command with a > command:  python .\GET-Org-NL.py > Get-Org-NL.txt fx.    When running option 1 I get this error:    PS C:\Python\Python310\Scripts> python .\GET-Org-DK.py File "C:\Python\Python310\Scripts\GET-Org-DK.py", line 5 line = f"id: {p_id} \t name: {p_name}"   But I can fix this with the above command 🙂    I will mark your idea / solution here Rasmus    Thanks to all, here for your help. 🙂  ... View more

Thanks for the links I will dig more into them. 🙂    I found a solution for point the print info into a file. 🙂    Thanks for all the help 🙂  ... View more

Nice that worked. 🙂    If I want the output to be put into a file what then? 🙂    Thanks for all your help on this. 🙂 (I need to learn more Python... any good links that I should study??)   Frank ... View more

Hi Rasmus,   When I edit your script and run it in my powershell on windows I am getting this error:   PS C:\Python\Python310\Scripts> python .\GET-Org-DK.py 2022-09-09 08:12:35 meraki: INFO > Meraki dashboard API session initialized with these parameters: {'version': '1.24.0', 'api_key': '************************************fb59', 'base_url': 'https://api.meraki.com/api/v1', 'single_request_timeout': 60, 'certificate_path': '', 'requests_proxy': '', 'wait_on_rate_limit': True, 'nginx_429_retry_wait_time': 60, 'action_batch_retry_wait_time': 60, 'retry_4xx_error': False, 'retry_4xx_error_wait_time': 60, 'maximum_retries': 2, 'simulate': False, 'be_geo_id': None, 'caller': None, 'use_iterator_for_get_pages': False} 2022-09-09 08:12:35 meraki: INFO > GET https://api.meraki.com/api/v1/organizations/*********/networks 2022-09-09 08:12:35 meraki: INFO > organizations, getOrganizationNetworks; page 1 - 200 OK Traceback (most recent call last): File "C:\Python\Python310\Scripts\GET-Org-DK.py", line 22, in <module> main() File "C:\Python\Python310\Scripts\GET-Org-DK.py", line 19, in main do_stuff(site[id],site['name']) KeyError: <built-in function id> PS C:\Python\Python310\Scripts>   Something in line 19 and 22.    I am guessing your have made your script to run on mac? 🙂 But it should be the same for windows right?^:)  ... View more

So I can see my description of the problem is a bit unclear. 🙂    So when I run the default "Get Organization Networks"   import requests   url = "https://api.meraki.com/api/v1/organizations/*******/networks"   payload={} headers = {   'X-Cisco-Meraki-API-Key': '*******' }   response = requests.request("GET", url, headers=headers, data=payload)   print(response.text)   I will get ALL networks in my org.  But what I would like to get here is ONLY : ID and name    "id": "L_********", "name": "DK - *******",   This is the hole idea here 🙂    So what would I do with this afterwords... See when I do deployment for countries only like DK I would be able to use this list and take either the ID or Name and provide into my script like this:    import requests import json sites = ["L_*********"] payload = json.dumps({ "mode": "enabled" }) headers = { 'X-Cisco-Meraki-API-Key': '*********', 'Content-Type': 'application/json' } for site in sites: print (site) url = "https://api.meraki.com/api/v1/networks/" + site + "/appliance/security/malware" response = requests.request("PUT", url, headers=headers, data=payload) print(response.text)   There might be a easier way on doing this, and hope you can guide me in some "smarter" direction 🙂    Does this makes sense??    I know that I can take the hole list out of the GET Orginazation function, but if this could be more specific it would be great, but I don´t know if there is a way to filter things here?? (I am NOT an expert in python, still learning)    Thanks for all your guides here.   Frank ... View more