Meraki MS switches do not support traditional redirect ACLs like Cisco IOS switches. Instead, Meraki uses a "walled garden" approach.   Meraki does honor the url-redirect attribute returned by ISE in the RADIUS Access-Accept message. This is used to redirect the client to the ISE posture portal.   Meraki does not support Cisco-style dACLs. Instead, it uses Group Policies.   Refer the documentation. "These steps show how to configure ISE Authorization policy for wired employee access using 802.1X as well as supporting wired guest users with the hotspot portal.  Just like Meraki Wireless platforms, Meraki switches now support advanced use cases such as MDM enrollment, Native Supplicant Provisioning (BYOD) and posture assessment.  Please see the wireless section for information on how to configure these advanced uses cases."   https://community.cisco.com/t5/security-knowledge-base/how-to-integrate-meraki-networks-with-ise/ta-p/3618650 ... View more

The only option available is the one described in the documentation. Bulk Configuring Quality and Retention Settings Through Profiles - Cisco Meraki Documentation   The other way would be via APIs, but you will need programming knowledge.     ... View more

  You can simply do a packet capture on Palo Alto or check if you are experiencing any drops on Monitor.   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClTJCA0   https://kb.wisc.edu/security/page.php?id=90826   ... View more

This is the best way to configure in parallel and replace in a maintenance window. ... View more

This is normal regarding the AP port, it occurs every time a client roams from one AP to another. ... View more

This is not common and can be caused by a variety of reasons, such as: Port flapping (e.g., due to a faulty cable or loose connection) BPDU conflicts (multiple BPDUs received in a short period of time) Misconfigured STP settings or network loops ... View more

Knowing Palo Alto is probably missing some firewall rule. ... View more

Unfortunately, Firefox for Android does not support remote homepage configuration via Meraki MDM directly.   You might be able to get something done using Kiosk. https://documentation.meraki.com/SM/Profiles_and_Settings/Android_Kiosk_Mode_in_Systems_Manager   ... View more

What about disabling VHT/HE mode? ... View more

What is the minimum bitrate setting? Try disabling VHT/HE mode.     ... View more

Hi @david_n_m_bond    You can submit a feature request using the "Give youe feedback" button.   https://documentation.meraki.com/General_Administration/Other_Topics/Give_your_feedback_(previously_Make_a_Wish)   ... View more

To tell you the truth, I have a scenario similar to yours, two HUBs in different data centers and both with a static route to the 10.0.0.0/8 network, and I have no problems at all. ... View more

Instead of a broad 10.0.0.0/8, define only the subnets that are actually behind the core.This allows AutoVPN to take precedence for more specific prefixes.  ... View more

There are some reports of issues with this version, I think the best thing to do is open a support case to let them know about the issue and help find a solution. ... View more

Microsoft has not released a migration tool that supports changing the Public IP SKU for Meraki vMX deployments. Re: Change SKU from basic to standard on IP address on Meraki VMx - The Meraki Community   In this case it is recommended that you redeploy vMX if you need to migrate to a standard SKU public IP. ... View more

No, you cannot manually configure speed or duplex settings on Meraki APs. Meraki APs always rely on auto-negotiation for link speed and duplex.  ... View more

AVB is not supported on the Catalyst-M series switches managed by Meraki. ... View more

Meraki’s RBAC model currently does not restrict visibility of untagged ports, only configuration rights are limited.   Managing Dashboard Administrators and Permissions - Cisco Meraki Documentation ... View more

Smart Client is also supported on mobile devices.   https://www.draytek.com/products/smart-vpn-client/ ... View more

For mobile you can use the device's native client.   https://documentation.meraki.com/MX/Client_VPN/Client_VPN_OS_Configuration ... View more

In this case, you would have to configure a tunnel between the ISP's modem and the MX, and since it is a home network, I don't believe that all ISPs will allow you to configure this.   https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#Non-Meraki_VPN_Peers   Another option would be to create an inbound NAT on the MX for your Alcatel's IP, but I personally think this is insecure, since you would have to open it to any source since you are using dynamic IPs.   https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Port_Forwarding_and_NAT_Rules_on_the_MX   The best way I see is if you could make an MX available for each location and then work with Meraki's Auto VPN.   https://documentation.meraki.com/MX/Site-to-site_VPN/Meraki_Auto_VPN_-_Configuration_and_Troubleshooting   ... View more