I know this is old, but what did you do to get the Valcom equip working ... View more

This thread makes me never want to upgrade any of my stacks. I'm new to Meraki (old school Cisco here). I would never want to leave some sort of vulnerability open though. My switches are currently on 11.31, and haven't seen any real issues that force me to upgrade. I just see that "Update available" message and think I should.   ... View more

Hi @jwwork ! I see similar behaviour on a couple of switches running MS 11.30..       ... View more

@MRCUR wrote: @Mosquitar wrote: Hi,   Did you ever get this issue resolved? If so, what was the fix as we are experiencing issues with a topology similar to yours.   Thanks Unfortunately not. I had to reopen the support case today as the issue (likely with DNS) is still occurring and causing instability for the 425 stack. The school year ended before we were able to determine a root cause last year so hopefully it can be found this time around.  The remaining issue is being caused by malformed DNS packets through the app X-VPN - https://xvpn.io/. The individual packets are significantly larger than would be expected for a DNS response and are possibly all being sent to the MS425 CPU to process for DNS inspection.    We've put in place ACL's on the 425 stack temporarily to block all DNS traffic that does not go to or come from our internal DNS servers. MS engineering is looking into the issue.  ... View more

I agree, I enable BPDU Guard on every access port without exception.  I was having an issue where it wouldn't disable on a switch to switch trunk which I had not seen before. ... View more

Thanks jwwork, There are a couple of areas out in the warehouse I've just remembered where we are relying on STP to manage redundant links, mainly because the switches are really low capacity with only a single Gig uplink so I couldn't build an Etherchannel with that and a 100Mbps link but thinking about it, the throughput is that low I could switch to a pair of 100Mbps links in Etherchannel and use the gig for a device connection and still have performance to spare, plus break the loop completely. ... View more

I did a similar rip and replace - I ended up using CIDR on each side of my core links to remove layer 2 vlans  traversing my uplinks - set my root on each side and it's running much better now - I struggle with no pvst - I did set my cisco switches / stacks to mst mode but that did not resolve my issues.  I don't allow all vlans across any trunks, I only allow the vlans that are needed - I am always very careful about having the same settings on each side of the link. I miss not being able to do "no spanning-tree vlan#" ..... ... View more