Meraki support says they see flapping on the circuit at the far end, so I have opened a ticket with the ISP to have them investigate. Thanks for the input...will update once the ISP does their thing. Hopefully, them fixing that will resolve the issue. ... View more

Hi @RahulPrasadh,   Yes, that should do it. You can also add custom expressions for a more specific set of IPs or subnets. ... View more

Hi @Hmuet - directions for contacting support (including a link to a form for direct submission in case you aren’t able to access the dashboard) are here: https://documentation.meraki.com/General_Administration/Support/Contacting_Support ... View more

Here you go: Once you start capture, have the other user try to connect to the VPN. If you wait too long the capture will stop too soon so you'll have to be on the phone to do this correctly. ... View more

Hi @nikovalchanov,   What is the link negotiation speed of WAN 1? If you hover around the WAN port it will show you the current speed. If the negotiation is downshifted to 100 Mbps for some reason you might see a drop in throughput, so I would start with tshooting Layer 1 first. Also, questions from @double_virgule will help isolate the issue further. ... View more

Hi @mdubs91,   The banner is simply alerting you that MX local VLAN subnets overlap with Non-Meraki peer Azure which is configured with a default route 0.0.0.0/0 on MX VPN config, this will cause all traffic (including internet) from VLANs taking part in VPN to go over the full tunnel to Azure. If this is your intended design to tunnel all traffic to Azure then that banner will be there for alerting purposes.   Making changes to any routing configs to MX subnets like anyconnect routing for example will cause NM VPN tunnel to reinitialize hence you might see the drops for full tunnel traffic.   Is Azure peer supposed to share a 0.0.0.0/0 subnet? If not, it's better to only have IPsec SAs between specific subnets that you want to reach from MX to Azure instead of tunneling all traffic. This will get rid of the banner and network connectivity drops.       ... View more

Hello Guerino,   Flashing/blinking green and red LED is not mentioned in the normal LED indicator operation section in the datasheet. An NSE should be able to assist further on the Support case you opened. https://documentation.meraki.com/MR/MR_Installation_Guides/MR33_Installation_Guide#LED_Indicators_and_Run_Dark_Mode ... View more

Hi @40mb,   I agree with @DarrenOC, if you are making changes on the MX WAN interface for its management DNS servers it should not affect clients' DNS. Keep in mind that, if you have your DHCP scope set to Proxy to upstream DNS, clients with existing DHCP lease will get the updated DNS server when they renew their lease and new clients will get updated DNS servers immediately with the new lease.     ... View more

Hello @RaphaelL,   I will take back my previous response, as it does not seem we are compliant with RFC 5798 as you correctly pointed out. Thanks for that! Implementation of VRRP for HA is limited within MX product models and we don't use it for communication with another vendor for VRRP. We are not claiming that we are VRRP compliant, we just provide HA for MX and MS with our implementation. Apologies for the error everyone, I have added the feedback to the documentation already as stated earlier. ... View more

yeah, i did it, thanks ... View more

Thank you for the feedback! Much appreciated!   I will certainly add this feature to a feedback suggestion. ... View more

Hi All,   Thanks for the help with this guys.   This is baffling. I picked up your replies on Monday morning and was just about to set about double checking stuff out but i thought i would just make sure it was still dead.... and behold....  without me doing anything, it was working !   No idea whats happened there ,I never made any changes and its a dev environment which only i am using at the moment so i cant explain why it wasnt working on Friday, then was on Monday morning.   I cant imagine there was some sort of delay or issue with the dashboard provisioning the commands down to the box which took a weekend to do but in the absence of any other reason ?... dunno.   I have been monitoring it since Monday morning and it appears to be working correctly now.   Thanks again for your help and assistance guys.   Cheers   ... View more

Overlook in configuration, it is easy to miss which vnet to put in private subnet field on Meraki side, it is the fronend subnet where azure resources are          ... View more

Similar 'problem' here with my QNAP. Nothing new to this topic? ... View more

@KarstenI Cool, understood, so the end game is free SM end points (all except Windows OS) so that Trusted Access works "for free so to speak" and the APs are in the same DO so the 2 things "hook up" together - got it! Genius!  ... View more

@PhilipDAth Your script is definitely better, because it uses this new engine, and users can use the same shortcut to connect / hang up. If you find a way to make it active for all users, it would be great. ... View more