It sounds like you don't have a RADIUS server set up if you don't know the host/port/secret. You'll need to run your own RADIUS server such as NPS on Windows Server. See here for documentation from Meraki: https://documentation.meraki.com/MR/Encryption_and_Authentication/MAC-Based_Access_Control_Using_Microsoft_NPS_-_MR_Access_Points   You could alternatively use Meraki hosted RADIUS if you are okay with doing user auth instead of MAC based auth. Keep in mind that MAC's are very easy to spoof.  ... View more

You'll need a router in front of the MX to run BGP. Or you could just allow the ISP's to do the BGP as @PhilipDAth suggested.  ... View more

@PhilipDAth CMNO isn't for partners.  ... View more

The MS220 series is not a Layer 3 switch so it will not do routing for you.  ... View more

I think the HPE/Aruba DAC would probably work fine on the MS250, but would obviously not be supported by Meraki if you needed assistance. Same for using a Meraki/Cisco DAC with support from HPE/Aruba. Meraki doesn't block the use of 3rd party transceivers in firmware, however I have seen some rumblings that HPE/Aruba is beginning to do this in recent firmware revs.    You could also use SFP+ SR transceivers on both sides with a multimode fiber patch cable in between. This would be fully supported by both vendors assuming you had an HPE transceiver on the 2920 side and a Meraki transceiver on the MS250 side.  ... View more

Why don't you use Meraki hosted auth? This will allow you to implement 802.1x auth on the SSID without needing to use MAC based auth and not need an external RADIUS server. See here for how this is set up in Dashboard: https://documentation.meraki.com/MR/Encryption_and_Authentication/Meraki_Cloud_Hosted_Authentication ... View more

@KayouMT Your understanding of 802.1x is correct here. The confusion in this thread is from your original title - "MAC-Based" - as you are not actually trying to do MAC based auth here.    You could use MAC based auth for non-AD devices however, or use AD user auth (instead of computer auth as you mentioned). We typically implement AD user based auth for WiFi so BYOD can be supported and devices can be joined that are not bound to our domain.  ... View more

This should be the guide you're looking for: https://documentation.meraki.com/MS/Access_Control/Configuring_802.1X_Access_Policies_on_MS_Switches_using_Windows_2008_NPS   This may also help for the user side config: https://documentation.meraki.com/MS/Access_Control/Configuring_802.1X_Wired_Authentication_on_a_Windows_7_Client ... View more

The example you posted is for switch admin auth with RADIUS, which isn't relevant to MS switches as there is no SSH function available to users.    Are you trying to do MAC based authentication (where you are authorizing the computer's MAC address) or user authentication where you want to use the AD credentials of the user or computer?  ... View more

@Adam When using Windows NPS for MAC based auth, you actually create AD users for each MAC. The username & password are both set to the MAC address. It's a really odd setup, but it makes sense because NPS uses AD as its auth DB.  ... View more

I've successfully used a few of their devices to extend PoE on very long (out of spec) ethernet runs supporting MR devices. We did have one that just up and died completely which was a bit frustrating. We had to purchase a replacement (at a discount) when EnableIT claimed there was water damage to the device.  ... View more

LACP isn't supported by ESXi unless you have Ent Plus. But as @PhilipDAth mentioned, you can just plug all of the physical NIC's on your ESXi host into your MS switch and make sure in ESXi your vSwitch has all of the pNIC's assigned to it.  ... View more

@RodrigoC Good to know - thank you! ... View more

@RodrigoC How does the "priority" on cases created through Dashboard influence the support process?  ... View more

@PhilipDAth The *only* times I've had to hold for a long time is when the transfer process between call centers seems to be broken. I've only encountered this around the times where the office answering is changing. This seems to happen somewhere between 7-8AM Eastern in the US where it switches from the Sydney office to the San Francisco office. Generally hanging up and calling back gets me right to someone.  ... View more

@CHN This is the CMNO info/signup page: https://meraki.cisco.com/webinars/cmno ... View more

@Neal Here's another one @CarolineS!  ... View more

@Adam Not to go too off topic here, but how do you like Umbrella? Is there any real integration with the MX/Dashboard yet, or is administration still completely done in the OpenDNS UI? Any big gothchya's with it?  ... View more

What does the NPS log say when you try to authenticate? Are you using this NPS server for anything other than the Meraki AP's? Can you ping the NPS server from the subnet where the AP's are (management interface)?  ... View more

You may find that the client load balancing feature is best left disabled in a low density setup. Otherwise you'll see these rejections happening. Some clients don't handle that well in my experience and end up in a state where they simply keep trying to associate with the AP that is rejecting them.  ... View more

This provides good instructions for Windows 7: https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_Clients_for_802.1X_and_Meraki-hosted_RADIUS ... View more

This is a new issue that just started within a day or so.  ... View more