Congratulations Adam. We shall miss your presence. Hope your contributions to the community continues. ... View more

Hi Rohit, Greetings. Your questions are not stupid at all perhaps they are helping me to learn new things. Let me try answering them. Again my answers can be wrong. For Question 2 I understand the Traffic Routing is more or less similar to the process you described with Meraki too. However if you establish a FULL Tunnel between the Branch and DC all of the traffic including internet will reach to DC. Hence No Local Break out. In case you establish a SPLIT Tunnel all the internet traffic will breakout locally. I believe it will be challenging to select L7 traffic and redirect rest all other traffic to DC. For Question 3 The Link terminated on Interface 1 and Interface 2 shall be treated as Internet Links and will be used for Meraki Cloud Management Traffic. I do not see an option of selecting 3rd Link (LTE) for Meraki Management Traffic unless Link 1 and 2 fail.   Your queries are pointing towards SD WAN feature of Meraki. Hence very quickly (We have Dussehra going on)  I could search the following documentation. I am not sure if they are relevant. Also you may watch "Fady Sharobeem" Youtube videos on MX Deep Dive. https://documentation.meraki.com/MX/Deployment_Guides/SD-WAN_Deployment_Guide_(CVD) https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences   I hope you are an existing Meraki User. If not you may try a demo. https://meraki.cisco.com/lp/free-demo Have a nice day. ... View more

Hi Rohit,   Let me try replying you. However my answers can be wrong.   1. Number of Supported signatures for Application Recognition   The Layer 7 Application database is constantly updated.    Following is the excerpt from Meraki website.   "The Cisco Meraki cloud-based application signature database is constantly updated to identify new and changing applications, without requiring the administrator to download and install software updates. The Cisco Meraki cloud-based architecture continually learns based on activity from Cisco Meraki's thousands of customers and millions of users, increasing the accuracy and precision of application fingerprints."   2. Does Meraki support DIA for SaaS based traffic(O365, Salesforce) from local exit standpoint while rest of internet traffic should exit from DC   I understand this shall be challenging. Perhaps there is a similar conversation going on with @PhilipDAth. Check the following Link https://community.meraki.com/t5/Security-SD-WAN/Meraki-local-break-out-for-office-365/m-p/30010   3. Can LTE interface alone can be used for Signalling to Meraki Cloud while we operate Two MPLS WAN Links simultaneously I understand LTE comes in use when your Internet 1 and Internet 2 Interface links are down.   4.Is full mesh topology a default feature for VPN tunnels or needs to be configured manually I believe you need to define this for on your sites. ... View more

Hi, Agreed, I shall recommend using the Cisco Router for cell connectivity. This offers us Load Balancing and Traffic Flow Preference feature between the links. ... View more

Hi, I missed to understand the question? Even though MX WAN2 has a private IP (with Internet Access) there shall not be a challenge in functionality unless you wish to use  Port Forwarding , Site to Site VPN (with Non Meraki), Client VPN etc. kind of configuration.   Failover and Load balancing between both the links shall work perfectly fine.   ... View more

Hi Mehdi This is my understanding. Either of the methods used for testing the throughput is wired. (93 and 87 Mbps).   20 Mbps is when you do the test via Wifi. Can you verify the following. 1. Laptop Wireless Lan card. Is it b/g/n/ac? 2. Connected band. 2.4 / 5 Ghz. 3. Distance from the AP 4. Do the same test on few more devices. 5. I hope you have not created any group policy capping the speed.   Also I understand achieving Wired Throughput on Wireless seems to be difficult.     ... View more

Hi Aman, This shall not be possible with MX64. You may achieve this with help of Cisco ISE / Radius Server integration. ... View more

Hi Nick Meraki Go GR10? I do not know the answer. Will you be interested in posting this to a dedicated community of "Meraki Go". That is available at https://community.meraki.com/t5/Meraki-Go-Community/ct-p/go.   ... View more

Hi Chris I may be completely wrong. 4G connectivity is ideal for Cloud Management I do not see them as an alternate for MPLS.   However if we can have public static ip and desired ports open on 4G service we may configure site to site vpn with a Non Meraki peer.   Note : I have never tried this configuration though.  Lets wait for more inputs from community members.     ... View more

Hi I believe as of now only possibility is to have  unlimited or single login.   Is there a way to limit number of logins on AD? May be of some help here.       ... View more

Hi, I believe as of now "Hostname" is not supported. We need to configure IP Address in the  Radius Server field.   However I suggest an input from @PhilipDAth I could be wrong too.   ... View more

Hi Jorge, Agreed to @PhilipDAth. I too do not see any challenges with the proposed topology.   I hope you have already referred the following Url https://documentation.meraki.com/MX/Other_Topics/Warm_Spare   ... View more

Hi, If this is to reboot Meraki APs?   One idea is to cycle Multiple Ports on the switch (If  you are using Meraki POE Switches.). However the feature is interesting and you may put a request on "Make a Wish" section from the Dashaboard. ... View more

Hi Kegan,   This is my understanding. Basically this feature enables "SSID-wide single VLAN tagging" / "Per-AP multiple VLAN tagging". An ideal scenario could be as the document suggests to assign different VLANs to devices on the basis of their location. However SSID remains same. Yes, when we enable this feature we also need to specify a default VLAN for rest of the APs.   To throw untagged traffic I believe we need to disable this feature. ... View more

Hi, Ideally you should consider MX84 for 160 devices. I believe you may observe slowness / degraded performance on your network while using MX64-68 for such a kind of load.   You may refer to MX sizing guide (on Page 4 & 5) for more information https://meraki.cisco.com/lib/pdf/meraki_whitepaper_mx_sizing_guide.pdf   Following are the excerpts from the above Sizing Guide.   Although there is no hard limit on the number of client devices that can be deployed below MX Security Appliances, for purposes of this document all tests were performed with the client counts shown in the table below. Exceeding these client counts may result in performance that varies from the sizing data contained in this guide.   UTM products come with a variety of security and networking features. Understanding the benefits and tradeoffs of these features is crucial to getting the maximum security benefit without unnecessary performance degradation.     ... View more

Hi Unni, This is my understanding. MXes in HA works in Active-Passive mode. We need a single License for this functionality. This means at a given time only 1 MX shall be in service. All the traffic needs to flow via the active MX. The traffic flow may utilize both the Links (ISPs) using Load balancing and Internet Flow feature. If you have SD-WAN you have further options to segregate traffic.   Failure of MX / ISPs shall swap the roles (Primary / Spare) of devices.   ... View more