Found the issue: IOS-XE mode switches do not include the Message-Authenticator attribute even though in CS mode they do (MS switches also include it).  ... View more

Has anyone tried RADIUS with a C9300 that's been migrated to native IOS-XE? The switches keep logging "sessmgrd: Cannot open UDP socket for service Radius server" and we don't see any traffic to the configured RADIUS servers but we do see it in the aaa config.  ... View more

@WirelesslyWired Yes that's correct.  ... View more

Thankfully I haven't had the issues like @PhilipDAth with a migrated MS390, but I do have a C9200L that seems to be happy never kicking off the migration. Definitely not enough info through CLI or Dashboard to tell what's going on or what's not going on.  ... View more

I think this should say "last fetched" once on IOS-XE.  ... View more

The tools (including CLI) work for me on a migrated MS390. It seems like your migration might not be done yet or something else is going on.  ... View more

There are dozens of us!  ... View more

Glad to see these being posted again. No updates for August?  ... View more

Did you get a resolution for this issue? I'm seeing it on an MX95 and the issue has persisted even after a downgrade back to 18.107 firmware.  ... View more

Palo Alto to Meraki MX? That's quite the downgrade in feature set.  ... View more

Run away and don't look back.  ... View more

This might be my favorite episode. Let's do it again sometime @merakisimon! 😉 ... View more

Late to the party on this, but a big FINALLY to the MV team for adding this feature!  ... View more

@EvanM Yes, we still run the two vMX appliances that I referenced earlier. Current costs are in line with what I posted previously. They just work for us which has been great. Essentially no maintenance other than updating the Azure VPN subnet list when we've added additional subnets at other sites.  ... View more

Thanks @Kevin_C. Great to see that's supported now.  ... View more

Any update on full disk access profiles that @Baustinceltic asked about @Noah_Salzman?  ... View more

@aws_architect No sorry, we don't use wired 802.1x anywhere currently.  ... View more

@Chriz_J I'm not sure what you mean by "emergency" management IP. If you set an IP through Dashboard or the local UI for a switch, that is the IP the switch will use for its Dashboard (Internet) connection. There isn't a concept of a "backup" or "emergency" IP on Meraki devices (they will automatically revert to a previous IP however if you incorrectly configure the management IP).  ... View more

@BlakeRichardson wrote: @SoCalRacer  Could you not mount on the ceiling tile itself? Sandwich the tile between the camera and a piece of wooden board on the otherside so that it has a decent fixing.    Much easier to replace the tile than the T-bar when you end up replacing hardware.  The MV12's are so light there isn't really a need to have a wooden bar above the tile. We screw directly into the tile with the plastic screw retainers (for drywall) above the tile to keep the screws secure. We're over 1,000 deployed now and none have come off tiles unless encouraged by flying objects.  ... View more

This is a known issue which I believe affects all models of cameras. Engineering thought it was fixed on 3.26 firmware but it's still happening.  ... View more

@MRCUR wrote: @Mosquitar wrote: Hi,   Did you ever get this issue resolved? If so, what was the fix as we are experiencing issues with a topology similar to yours.   Thanks Unfortunately not. I had to reopen the support case today as the issue (likely with DNS) is still occurring and causing instability for the 425 stack. The school year ended before we were able to determine a root cause last year so hopefully it can be found this time around.  The remaining issue is being caused by malformed DNS packets through the app X-VPN - https://xvpn.io/. The individual packets are significantly larger than would be expected for a DNS response and are possibly all being sent to the MS425 CPU to process for DNS inspection.    We've put in place ACL's on the 425 stack temporarily to block all DNS traffic that does not go to or come from our internal DNS servers. MS engineering is looking into the issue.  ... View more

@Mosquitar wrote: Hi,   Did you ever get this issue resolved? If so, what was the fix as we are experiencing issues with a topology similar to yours.   Thanks Unfortunately not. I had to reopen the support case today as the issue (likely with DNS) is still occurring and causing instability for the 425 stack. The school year ended before we were able to determine a root cause last year so hopefully it can be found this time around.  ... View more

I'm pretty sure you'll need to NAT to a different IP for the WAN 2 rule. Can you go for the other option @PhilipDAth presented so this isn't an issue?  ... View more

Are you unable to use a Virtual IP in this scenario and just connect WAN 1 port on each MX? This would allow you to leave the NAT rules alone.  ... View more

As long as you have a route to the camera VLAN, you'll be okay.  ... View more