if its a Windows machine, running the following command will show what band is being used   netsh wlan show int             ... View more

I am not sure if "enable" is the right term here; it is a requirement from the 802.11ax-2021 amendment:   ----- snip ----- The following apply to a STA operating in the 6 GHz band: - The STA shall not use the following pre-RSNA security methods:   ...   - Open System authentication without encryption   ... ----- snap ----- and  ----- snip ----- The STA should use Opportunistic Wireless Encryption, as specified in IETF RFC 8110, when connecting in an infrastructure BSS without authentication (as a replacement for Open System authentication without encryption). ----- snap ----- ... View more

I can't add much more except to say you tend to use BGP from the VMXs back to your layer 3 core switches to handle route redistribution. https://documentation.meraki.com/MX/Networks_and_Routing/Border_Gateway_Protocol_(BGP)   ... View more

If your client is wired, then the policy will apply on the MX.  That means the client could connect fine to the switches but will have no luck in connecting to internet or other VLANs. If your client is on an MR access point, it will apply there and the client won't have any connection. ... View more

Have you had any recent changes to your network? Like any changes to your firewall rules? You can also check the Local Status Page of your access point, where you may have some indication of the problem. https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page   ... View more

Hi @carlto , Your configuration is correct. This sounds to me like a carrier specific quirk.   Please connect a laptop set with DHCP to the passthrough mode MG. We need to verify if laptops gets an IP address and if you can access let's say meraki.com. If you can, we might have an issue between MX and MG and meraki support should be contacted. If you can not surf, I would recommend reaching out to the carrier.   I hope it helps! ... View more

Hi @carlto , This might interest you 😉 "BGP peering over IPsec VPN tunnels can be enabled on the Meraki Security Appliance. This unlocks new dynamic routing use cases for customers in addition to enabling resiliency and redundancy over IPsec VPN peers. "   https://documentation.meraki.com/MX/Site-to-site_VPN/BGP_routing_over_IPsec_VPN         ... View more

Multi-VLAN is supported with MR 18.1 and higher. It is a closed Beta, you have to open a support ticket to activate it. So your test installation needs to be a separate organization, because those features are activated per org and not per network. https://documentation.meraki.com/MR/Deployment_Guides/Mesh_Deployment_Guide#Multi-VLAN_support_over_Mesh ... View more