Ive been using my own ID (personal email address) up until recently to handle my certifications, and my company was using this to give me access to various cisco items   Recently i was forced to create an identity to work with Umbrella that was @myemployersdomain. I find the Cisco SSO clunky and awkward. Why not just let me provide my own SSO?   I currently am pushing SAML integration from my Azure Active Directory to my MSP Dashboard for Meraki, is that now in jeopardy?   Ive found OneID to not be very user friendly, and it really has a hard time with multiple identities. Ive found even logging out of it and clearing tokens to be difficult   If you are a 100% cisco user, nothing else at all, i 100% see the benefit. If you have always been using some flavor of this, and nothing else, brilliant, it must seriously have made your life easier. But for partners...i find it awkward ... View more

In the PSA there is the Org name and the OrgID. The Ord ID can contain no spaces etc etc, and these cannot be changed after the fact. We've been playing around with the likes of IT Glue and other integration tools, and some are clever enough to make a guess at linking "similar" Organizations, but, you know, its not right! 🙂   I'll take your script and have a look at it, thank you very much. ... View more

It sounds like you are looking for Site to Site VPN's, but between separate Organizations   https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Site-to-site_VPN_between_MX_Appliances_in_Different_Organizations   If however you are looking to run AutoVPN, a limitation of AutoVPN is that it happens inside of an Organization.   What is the relationship between yourselves and the other organizations? Is there a potential to bring all the equipment into a single organization but separate Networks? You could divide up Meraki Admins to only have access to specific Networks.   I suspect you will need Site to Site with Different Organizations, but let us know if there is more to it. ... View more

Im going to play the pure Meraki card here   Option 1 - vMX in Azure will do your AutoVPN to all participating networks   Option 2 - Beta Firmware (15.xx) and Azure VPN Gateway - I have done this, it is simple enough, but ive found that the tunnels were either a) really stable or b) really not.   The vMX is not much more expensive than a standard VPN Gateway, and if you couple a Reserved Instance with the vMX, it is very compelling   The other alternative is AZURE VIRTUAL WAN!! And if you do get that working, please let us know your experience.   I have to say, Philip's method is one im going to investigate however! ... View more

Thank you for the response, im wondering if you or anyone has any thoughts on the setup. We dont want to do this, what we want is for the client to purchase two additional wan providers in each location and have full mesh autovpn.   The big ticket items for us are that we have no control of the wireless bridge. ... View more

I have seen this too with interest, but I do feel it is distracting from putting a better implementation of SAML / SSO in place to the existing Dashboard. I would like the devs to have another stab at the existing SAML and integration with AzureAD or OpenID.   This feels very much like "We have a cisco product that is kind of like what you do over there, why not force yourself to use it and adapt every single one of your sign ins to fit our product?" ... View more

I had a trial MG21 and I was unable to get it to work with either Vodafone or Three sim card to be honest. However i was able to get a three sim card working in a Z3C, the gotcha being that you needed a cabled WAN to push the APN information to the cellular side.   So far using the MG21 as a replacement for the Huawei has been far too expensive an exercise, using C models has been easier. The Vodafone Huawei is poor, the Three one (B525?) can at least do DMZ. However watch out as i have had a lot of issues with DNS suddenly stopping until a reboot of the modem (on both providers). ... View more

This sounds like DNS and similar to my internet experience up until recently. I had been using a 4G Huawei modem into my Meraki, and i had problems. Lots of them. All DNS related. Once i moved to a VDSL connection, the issue was gone. They manifested themselves in almost the exact same way.   What internet connectivity have you got? ... View more

This is usally Error 789 in teh event log for the VPN.   I would look at the configuration for the user again, and make sure everything is ok.   Look at the following 1. Ensure that the Xbox Live Networking Services are stopped and/or disabled on her device. this can interfere with L2TP. 2. Try and use the various powershell scripts to recreate the VPN from scratch on her device 3. use rasphone.exe to lauch the profile as opposed to doing it through windows 10 Modern UI. ... View more

What version of IKE are you expecting to use on your tunnel? Is there any chance the Fortigate is looking for IKEv2 by default, and Meraki is only capable of IKEv1.   Are the two locations separate sites / clients?   This is likely to a difference in the encryption handling. Something like AES is showing but its 128 on one side and 256 on the other. ... View more

This doesn't really cover what we are looking to achieve. What we are going to investigate is integration with ITGlue. We recently brought it in to the organisation, and we are going to try and leverage it.   While API calls are the beginning of the solution, they arent the goal. I think even in this case if we were shipping logs to an SIEM appliance / suite it would be the location to start interrogating too.   An item i would love to see broken down or dissected is the Summary Report. Is it possible to build that same report with API calls or is it some internal Meraki dashboard magic, and the access to the database that allows it to be created and displayed ... View more

@Kamome reply is pretty much all of the options.   Would i be correct in assuming the SIM you have been provided is by your MPLS provider, so your data connection, even through via SIM, is being MPLS'd if you will excuse the expression. You arent going out on a general SIM card to a data connection and DMVPN or some such back into the MPLS?   The "C" series of Meraki routers are likely to be the best option, that and the MG devices. They will give you manageability of your WAN.   Get a trial of an MG and your desired MX and test it out. Get yourself lined up with a test SIM card from the MPLS provider and simulate it. You have 30 days for the Trial, no commitment. ... View more

If you are replacing or retiring ISE, then RADIUS of some sort is going to be your best bet.   Map out a few more requirements however, that might help you in choosing your RADIUS provider. Are you looking to offer any MFA on your services (VPN for example?). We have had some issues with VPN MFA and Microsoft NPS, the claim not going the entire way through. Solution ended up being Cisco Duo as the MFA. ... View more

The MX68 with two MR33 or two MR20 is my "Covid 19 CEO At Home, wants WiFi in loads of places" solution of choice.   The inclusion of the PoE ports are a great idea, i would simply love if one on the MX67 had been PoE too. Im not a fan of the MX##W's as the WiFi options are not as comprehensive. ... View more

I did, and god bless Internet Connection Sharing on an old Windows 7 Laptop ... View more

Watch out for Trial Kit on this, as they tend to be direct shipped! ... View more

You have the cellular gateway in the video, but if someone happens to get their hands on a Z3C, watch out.   Do not pack it all up, new and unboxed, with a lovely nano sim, and unlimited 4G plan, and drive to a remote site...   The cellular configuration needs to come down from the Dashboard, which means you need an ethernet internet connection first for the Z3C to sync up. Watch out!! ... View more