Hi All,   We are facing an unusual issue with our MX250. When business hours are about to start and the number of clients behind the MX250 increases, there is a sudden spike in device utilization, which leads to latency affecting all traffic passing through the MX. This latency impacts both WAN links and LAN-to-MX traffic. As a result, we also experience increased latency over Auto VPN traffic.   Everything was functioning normally until mid-September. To stabilize device utilization, we rebooted the MX250, which temporarily resolved the issue for about three days. Initially, we were running MX 18.211.2, and TAC recommended upgrading to MX 18.211.3. The upgrade was stable for two days, but on the third day, latency increased again due to high device utilization. TAC then suggested upgrading to the MX 19.1.4 Beta version, but the issue persists.   All necessary logs have been captured, but no solution has been found for this behavior. We are seeing traffic of only 100-150 Mbps when the issue occurs, and after a reboot, device utilization returns to normal. We’ve even swapped the primary MX250 with a spare unit, but the behavior remains unchanged.   We tried disabling IPS/IDS, AMP and the behavior remains same.   If anyone has encountered a similar issue with any of your MX devices, could you please share any fixes or suggestions? ... View more

Hi Team, We are using meraki in our corp offices currently we don't have proxy setup. All the traffic is being filtered in the Meraki itself. We are planning to use Cloud Proxy setup through zScalar Site to Site Tunnel and the same has been tested. As per the document we have to use a script for performing a tag based failover of non-meraki s2svpn tunnel. The script sometimes break and we have relaunch it everytime it goes down. Do we have any updated script to test the failover scenario in non meraki s2svpn tunnels. As we are planning to have this setup from every network the script doesn't seems to be stable. Can i get some suggestion on this. Apart from this why doesn't Meraki support for having a Secondary Peer IP Address in Non Meraki s2s vpn tunnels. If such option was available then the running a script would not be required. ... View more