Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Become a member of the Cisco Meraki Community today
Get answers from our community of experts in record time.
Join nowAbout JeroenVercoulen
JeroenVercoulen
Getting noticed
Member since Jan 14, 2021
Wednesday
Community Record
55
Posts
39
Kudos
1
Solution
Badges
3 weeks ago
Hi All, I see in the logs on the switch and in the Meraki Dashboard that the tunnel is flipping several times a day. Is this expected behaviour? Within 5 second the tunnel is up again. Sep 25 04:32:37.863: %LINEPROTO-5-UPDOWN: Line protocol on Interface TLS-VIF2, changed state to down .Sep 25 04:32:37.870: %SYS-5-CONFIG_I: Configured from console by vty0 .Sep 25 04:32:37.733: %MERAKI_MGRD-5-PRI_TUNNEL_STATE: Switch 1 R0/0: meraki_mgrd: Primary Tunnel State: state changed from UP to DOWN .Sep 25 04:32:37.733: %MERAKI_MGRD-5-SEC_TUNNEL_STATE: Switch 1 R0/0: meraki_mgrd: Secondary Tunnel State: state changed from UP to DOWN .Sep 25 04:32:43.556: %SYS-5-CONFIG_I: Configured from console by vty0 .Sep 25 04:32:43.560: %SYS-5-CONFIG_I: Configured from console by vty0 .Sep 25 04:32:43.565: %SYS-5-CONFIG_I: Configured from console by vty0 .Sep 25 04:32:43.565: %LINEPROTO-5-UPDOWN: Line protocol on Interface TLS-VIF2, changed state to up .Sep 25 04:32:43.436: %MERAKI_MGRD-5-PRI_TUNNEL_STATE: Switch 1 R0/0: meraki_mgrd: Primary Tunnel State: state changed from DOWN to UP .Sep 25 04:32:43.436: %MERAKI_MGRD-5-SEC_TUNNEL_STATE: Switch 1 R0/0: meraki_mgrd: Secondary Tunnel State: state changed from DOWN to UP
... View more
Labels:
- Labels:
-
Other
a month ago
@PhilipDAth those limits I know. I mean the limits of that specific call. For example with a batch job you can only do 100 changes in 1 API call. But that limit of how many is unknown to me for this specific call.
... View more
Sep 16 2025
2:28 AM
Created an Ansible script to do this. Just couldn't find the limits of the concurrent objects that could be changed. So created a loop with enough retries to accommodate the API limits of Meraki I hope 🙂 - name: Get organizations cisco.meraki.networks_info: meraki_api_key: "{{ meraki_api_key }}" organizationId: "{{ meraki_organizationId }}" perPage: 1000 total_pages: -1 register: meraki_networks - name: Update FeatureTiers ansible.builtin.uri: url: "https://api.meraki.com/api/v1/administered/licensing/subscription/networks/featureTiers/batchUpdate" method: POST body_format: json headers: Accept: application/json X-Cisco-Meraki-API-Key: "{{ meraki_api_key }}" body: items: - network: id: "{{ Network['id'] }}" productTypes: - productType: appliance featureTier: advantage isAtomic: true register: uri_output retries: 20 delay: 5 until: "uri_output.status == 200" loop: "{{ meraki_networks['meraki_response'] | list }}" loop_control: label: "{{ Network['id'] }} - {{ Network['name'] }} - {{ network_idx + 1}} out of {{ meraki_networks['meraki_response'] | length }}" loop_var: Network index_var: network_idx
... View more
Sep 15 2025
5:08 AM
I need to change the MX licensing level from Essentials to Advantage in our EA. I need to do this across several Organizations an 1000+ networks. Does anybody know how to do it an easy way except manually?
... View more
Labels:
- Labels:
-
Licensing
Sep 14 2025
11:26 PM
I see the logs on Meraki being flooded by the following message. Does anybody experience the same? Switch 1 R0/0: linux_iosd-image: Number of IPC messages held in the application reached the maximum channel threshold. IPC channel 'ngwc fed bipc': ipc_ctl_id 49 (ipc_fd 132, seq_num 210), curr IPC msg hel in appl 49415
... View more
Sep 10 2025
4:21 AM
I upgraded my first 9200-48P in a lab environment. When you have you're network set to 17.18.1 in the Meraki Dashboard and you're switch is running 17.15.3 you don't have to upgrade before adding it in Cloud mode on the Meraki Dashboard. Onboarding works with 17.15.3 and it automatically upgrades the firmware for you.
... View more
Sep 3 2025
4:32 AM
1 Kudo
aaa new-model aaa group server tacacs+ GROUP_TAC server name TAC-AUTH1 server name TAC-AUTH2 aaa authentication login default local group GROUP_TAC aaa authentication login MERAKI local aaa authentication enable default enable group GROUP_TAC aaa authorization config-commands aaa authorization exec default local group GROUP_TAC if-authenticated aaa authorization exec MERAKI local aaa authorization commands 15 default group GROUP_TAC if-authenticated aaa authorization commands 15 MERAKI local aaa accounting update periodic 3 aaa accounting commands 15 default start-stop group tacacs+ aaa session-id common
... View more
Sep 2 2025
10:51 PM
1 Kudo
I always use my TACACS account that has for me level 15 privilege. Meraki Dashboard never complains about that. This account is only used for onboarding and after that it creates a local Meraki account to authenticate.
... View more
Jun 20 2025
12:32 PM
It only supports OSPF on the LAN side of the MX when using single-LAN settings. But it only supports AutoVPN route distribution to Layer3 uplink devices. It does not learn routes from the Layer3 device. https://documentation.meraki.com/MX/Site-to-site_VPN/Using_OSPF_to_Advertise_Remote_VPN_Subnets If you want bidirectional routing you need to use BGP as mentioned above.
... View more
Jun 11 2025
1:40 AM
How much time is between when working fine till not working at all? The most equipment we are still using today is the MX68 but are looking to move over to the MX75.
... View more
Jun 11 2025
1:37 AM
You need to have SD-WAN+ to utilize SD Internet. This is what you are describing. https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/SD-WAN_Internet_Policies_(SD-Internet)
... View more
Jun 10 2025
5:40 AM
From the 17.15.3 version there is a new way of management called Hybrid Mode. This is also a configuration change on the switch it self. With that you gain additional features in the dashboard. https://documentation.meraki.com/MS/Cloud-Native_IOS_XE/Upgrading_Cloud-Monitored_Switches_to_Hybrid_Operating_Mode Probably that is the reason you can't upgrade directly, because it requires an change in Management. The bug you speak of was in the with the Cloud-Native IOSXE version for the MS390, C9300(X) and C9200L versions for management in the Meraki Dashboard.
... View more
Jun 9 2025
11:08 PM
Currently we are using in the most places unmanaged Netgear equipment to connect the packing tables to the network. We already had several occasions that those unmanaged switches where interconnected by Warehouse employees. So we managed to secure the budget to swap all those unmanaged switches with Meraki MS130-8. We are talking about 750 of those switches. This gives us the flexibility to set a different VLAN to printers and Thin Clients, and also to use 802.1x authentication for the connected clients with our ISE Deployment. The main challenges we have is to get the time to swap the switches and the manpower to do so. After the switches are replaced we want to enable 802.1x authentication on the network for those devices.
... View more
Labels:
Jun 9 2025
11:02 PM
Good morning @Brash We use a lot of reasonable dynamic packing tables. Every packing table has at least 1 Thin Client and 2 printers connected to it, but it can go up to 4 printers connected. To keep the cables in the patch cabinet as low as possible we chose to use the MS130-8 connected to the back of a packing table to distribute the devices on this table. It also gives us the flexibility to assign different vlans to Thin-Clients and printer, or to add additional security by 802.1x for example
... View more
Jun 4 2025
11:02 AM
Also the C9300 switches are running the Cloud Native IOS-XE 17.15.3
... View more
Jun 4 2025
11:01 AM
11 Kudos
Our company decided to move to a new Warehouse location in the Neighborhood. There was no network infrastructure there so we needed to create an new Meraki network for this location. The challenge we faced during deployment of this new location is that the fiber connections weren't in time for the Go-Live of this site. We used an MG21 with a 4G connection to temporary make sure we would be able to use this site. We where using the following Meraki and Cisco gear 2x MX85 1x MG21 4x C9300-48P-M 2x C9300-48T-M 8x C9200-48P in Hybrid Mode 1x MS130-8P 1x MS120-24P 98x MS130-8 66x CW9164I-MR In the future for this location we hope to get 2 C9500-24Y4C to be able to dive the core over the 2 MER locations available in this site. So we can be fully redundant in setup.
... View more
Jun 3 2025
12:04 PM
2 Kudos
Must say I was steadily upgrading al networks to this firmware version. Everything was working correct till last Friday. An upgrade of the MS390 to this version failed. Now I have 2 dead switches. Maybe that's the reason I don't know. Seems like the troublesome MS390 will not end and this moment. Working on RMA for that one though. - Reboot not working - Factory reset not working - RMA pain in the ass at the moment Luckily the switch with the most AP's is still working.
... View more
Jun 3 2025
11:41 AM
I see this firmware has been removed from the dashboard. Any reason why?
... View more
May 18 2025
4:10 AM
2 Kudos
I'm already running several locations on this new firmware. I would say this looks good, also for the MS390 switches. You finally have an console for show commands.
... View more
May 18 2025
4:07 AM
Had a case with Meraki to fix this. Essentially I did add them via the old way again and removed it afterwards. Then I was able to add them again using the new way.
... View more
Apr 23 2025
11:03 PM
I've got Hybrid mode now available for my org. I migrated a stack of 4 switches to hybrid mode from cloud-monitoring mode. First of all it's a very easy process. as stated I added only the active member (in my opinion the stack master) to the network. But then the other switches aren't added at all. Does anybody know how this works? I tried to add a stack member later, but it failed to add and gave some ssh errors. Also the device tracking and monitoring commands aren't added to the stack member switches.
... View more
Apr 21 2025
11:13 PM
Migrating back to Cat9k mode took about 7 minutes. Than you have a factory default switch you need to reconfigure. Re-configuring is easy when you have a backup config
... View more
Apr 14 2025
11:16 PM
@Jeff-Lthe thing is, Our organization was enrolled in the private beta testing this before. So I already have several switches in this Org running in Hybrid mode. That is why in my understanding it was already working in my org.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 818 | Sep 2 2025 10:51 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 11 | 1013 | |
| 4 | 5337 | |
| 4 | 851 | |
| 4 | 10056 | |
| 2 | 3032 |
© 2025 Cisco Systems, Inc.
