Could you provide more details? For example, what type of authentication is being used? Are there any alerts on the dashboard? If you need to resolve this urgently, you can open a support ticket with Meraki via the dashboard, or even call them.     https://documentation.meraki.com/Platform_Management/Troubleshooting_and_Support/Support/Ways_to_Contact_Meraki_Support ... View more

You can connect the EVPL/ELAN to a LAN port on the MX and run iBGP between MX appliances across that private network.   Meraki MX supports iBGP only in VPN Concentrator mode (typically at the hub site), not in routed/NAT mode.   https://documentation.meraki.com/MX/Design_and_Configure/Configuration_Guides/Networks_and_Routing/Border_Gateway_Protocol_(BGP)#iBGP   Meraki does not allow granular routing policies like Cisco IOS, it uses VPN route metrics and static routes with administrative distance. If you want to prioritize the EVPL for site-to-site traffic, you can try creating AutoVPN tunnels over the EVPL (LAN interface) and the DIA (WAN1) and use VPN traffic control to prioritize the EVPL for internal subnets. ... View more

The MX expects WAN interfaces to have Internet connectivity for AutoVPN and SD-WAN features to work. If your EVPL circuit is a pure Layer 2 service without Internet access, you cannot use it as a standard WAN uplink unless you provide a default gateway and IP addressing on that link.   https://documentation.meraki.com/MX/Design_and_Configure/Deployment_Guides/MPLS_Failover_to_Meraki_Auto_VPN ... View more

Just one question: are you talking about the VPN within the SD-WAN, not a non-Meraki VPN, correct? If it's a non-Meraki VPN, you can't use NAT on the VPN. ... View more

I believe it won't work because you're trying to use the captive portal, which is in a different controller, with Meraki. You can use an external page, but not one that's in another controller, because the controller has a mechanism to redirect to the portal (generally Client connects to SSID and the controller intercepts HTTP and redirects to the splash page), and for that you need to connect to an access point that's connected to it. ... View more

Interesting. For the environments where I have the C9800, I use regular expressions to apply tags to the Access Points. This way, the only work I have to do is rename the APs, and as soon as it returns to the controller, the correct tags are already applied. It's not zero-touch, but it saves a lot of time. 😄 ... View more

What type of authentication are you using (802.1x, psk, etc.)? Are you using WPA2 or WPA3? Please send a screenshot of your SSID configuration. ... View more

I think it wouldn't hurt to do a double-check directly on the network and not on the template. 😉 ... View more

Is the local status page enabled on device configuration?       ... View more

I believe the Cisco community is best suited to answer your question. https://community.cisco.com/ ... View more

I believe support has already answered this question. ... View more

Have you tested the port locally on the server? A simple test is to isolate a host and the server from the firewall. But honestly, I still believe it's a server issue. ... View more

This seems to be a server issue.   Check if the server's firewall is blocking anything. ... View more

I believe that's something only support will be able to answer for you. ... View more

That would be a good idea. It doesn't hurt to do a double check. ... View more

Check your radius server logs. ... View more

Perfect, in that case the username and password will be the device's MAC address. Try checking if random MAC addressing is enabled and disable it, in most cases, that's the problem. ... View more

I believe the password the user is using is incorrect; see the error.   ... View more

I'm asking because it seems to be using 802.1x, but it would be good to confirm. ... View more

What type of authentication are you using? WPA2 with PSK, 802.1x, Open with captive portal? ... View more

Probably yes, it seems that name is not registered. ... View more

Member IDs are not globally unique across all stacks; they only matter within a single stack. When you add a switch to a different stack, Meraki Cloud re-provisions it based on the new stack configuration. The previous member ID is discarded during the join process. The cloud uses the switch’s serial number as the unique identifier for management, not the stack number.   Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard - Cisco Meraki Documentation ... View more

No, unfortunately not. In that case, consider using 802.1x.   Note: The device will still receive an IP address and will be able to resolve DNS names. Note: The EAP exchange will still be allowed for wireless clients, and devices will be able to associate with an SSID. The block will apply to client traffic after the 4-way handshake is completed. ... View more