Hi @carlto , This might interest you 😉 "BGP peering over IPsec VPN tunnels can be enabled on the Meraki Security Appliance. This unlocks new dynamic routing use cases for customers in addition to enabling resiliency and redundancy over IPsec VPN peers. "   https://documentation.meraki.com/MX/Site-to-site_VPN/BGP_routing_over_IPsec_VPN         ... View more

Hi @SysOP , Do you perhaps have RADIUS VLAN Override configured on that SSID? if so, what does ISE see when this issue occurs? https://documentation.meraki.com/MR/Access_Control/MR_Meraki_RADIUS_2.0#RADIUS_VLAN_Override ... View more

Hi @thomasthomsen , Correct. The Chain of Trust is a must.  😉  See the below excerpt from the AnyConnect Authentication Methods guide.   "AnyConnect server will use the uploaded trusted CA certificate to validate authenticating clients before requesting for the users' credentials. https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/Authentication#Certificate-based_authentication_with_Username_.26_password     ... View more

Hi @AVL , If the AP was connected to another device, sounds like could be IP Address issue and or VLAN towards the Meraki Cloud. Check the LED status of the AP and follow the suggestions in the tshoot guide below. https://documentation.meraki.com/MR/Other_Topics/Troubleshooting_and_Replacing_a_Faulty_MR_Access_Point#If_there_is_one_solid_orange_power_LED_and_no_other_LEDs_are_lit ... View more

Hi @JordanCN , This would be a web browser cookie situation, I've tested this many times. Here is how I resolved this. 1.) Go to the Dashboard page you prefer. Note the time/date. 2.) Logout of the Dashboard. 3.) In you broswer history. Delete all entries of the Dashboard. EXCEPT the page preference... NB, you might need to add a column to see time/date that page was visted. 4.) enjoy... 😀   ... View more

Hey there! In general, for most capable Layer 2/3 devices. You tag the port with your VLANs, then create virtual interfaces for each VLAN and add the layer 3 IP details; as shown in your examples. However, I am not certain about FirePower configurations. It's best to refer to the configuration guides or reach out to their support team for assistance. The Meraki Switch shouldn't be a problem as long as the port configurations are correct. ... View more

Hi @Acepak1 ,   Given the brief, if the Meraki Switch is only Layer 2 and will not perform any routing. Then the default config right out the box should be ok. See below guide for specifics.   https://documentation.meraki.com/MS/Deployment_Guides/Advanced_MS_Setup_Guide#Default_configuration   Essentially you could use the design on the right for VLAN 1 for Management (switches need IP address) and set the ports to match the VLANs needed for clients, dhcp, etc. just pay attention to;   1.) Ensure Ports being used have correct config. a. Ensure they are Trunked (only to other device ports that need specific vlans) or Access. b. Confirm Native Vlans match   2.) Ensure STP Root is set on the correct switching device. Don't know how many you have. So refer to guide. So something like on the Meraki Switch. STP = Managemnt VLAN 1. STP Priority = 32768   VLAN 1 = Management Vlan 10 = Data (DHCP, etc) Vlan 20 = Voice Port 1 -> other switch or AP Port Trunk Native VLAN 10 Allow 1,10,20 Port 6 - > to PC or Deskphone Access Native 10 Allow 10, 20       ... View more

Hi @Flip1365 , As @Brash mentioned, try the options in the guide. If stuck, you'll need to open a case. Note this can't be done via the Phone. In the Section Recovering Access to Accounts Protected by Two-Factor Authentication there is link to use. It should take you to the below.        ... View more

Hi @Blake-Larkan , I've seen issues like this in the wild before. Where, for some reason, the PoE client was not sending the PoE Flag in the CDP/LLDP packets to the switch. In those circumstances, was software bug. Something like this;     I would suggest running a packet capture on port 14 & 16. With one of the devices that are working on Port 13 & 15. Then visa versa for the "non working" PoE Clients.   If there is something funky in the pcaps. Raise a Support case for further investigation.     ... View more

Hi @Yash_03, Sounds like Asymetric path selection is happening here. I'm assuming you have a Switch connected to the MX firewall to service all these VLANs and Hosts. If so, I would recommend confirming the ports on the MX and any downstream switch have the VLAN configuration matching .i.e. Same Trunk details (Native VLANs & Tagged VLANS) or Access VLANs etc. The MX LAN ports do not behave like regular Switch ports. See below guide for further details. https://documentation.meraki.com/MX/Networks_and_Routing/MX_Layer_2_Functionality     ... View more

Hi @cscarpa , For Stacking it wont work. Port Aggregation it the way to go for connectivity between the two. See below guide for supported Accessories.   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Small-Form_Factor_Pluggable_(SFP)_and_Stacking_Accessories#Stacking_Cables         ... View more

  If it is happening Inbound too. Then that would mean that the problem is 'No Voice Path'. I.e. RTP/Audio streams. This is mostly due to a problem with signalling or due to Firewall/NAT/Port Forward issues.   Check the Voice Platform for indications of signalling problems. Check the configuration of firewall, switch, routers etc on the voice path. If you only have 2 VLANs, you might want to use 1 VLAN for Data and the other for ALL VoIP related traffic. Of course, always consult the Vendor's Platform guide. See below Meraki guide for common tips.   https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/VoIP_on_Cisco_Meraki%3A_F.A.Q._and_Troubleshooting_Tips#Internal_Notes_-_Additional_VoIP_Troubleshooting_FAQs   And remember, Packet Captures are your best friend. 😁 ... View more

Hi @J_Donegan , As @GreenMan has mentioned. Packet captures are the way to go to confirm issues or unexpected behavior. Do you know if the SCCM is using Multicast instead of Unicast traffic to communicate. This could explain the behvaior. If so, see below guide to ensure the set up is correct.   https://documentation.meraki.com/MS/Layer_3_Switching/MS_Multicast_Routing_Overview         ... View more

Hi @rhamersley , As @thaack mentioned, Group Policy is the way to go for seperation and security. However, if you are finding that they are not enough IP address being assigend. You can simply expand the subnet range. E.g. 192.168.1.0/22 would give you 1022 IPs to use.  ... View more

Hi @db3 , If your goal is to block IP/Subnets, there are a few ways this can be achieved. This does depend on your design though. E.g. Enabling a Group Policy to block traffic is a great way.   https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/MR_Firewall_Rules       ... View more

Hi @Obiwan_3011 , If you dial in, does that work or the same? If calls connects ok and you get silence. Most likely the RTP streams are being blocked or dropped. So, double check for things like (1:1 NAT, port forwarding, etc) on the Firewall.  Also where is the PBX/Platform hosted locally, remote site or in the Cloud?  ... View more

Hi @MisG, As others have mentioned, that cable should be fine. I just wanted to share the stacking guide, as reference, when you are ready to Stack them. Also, if you are planning on stacking two switches togather, you'll need a minimum of 2 stacking cables. This is to ensure a full daisy-chain configuration.   https://documentation.meraki.com/MS/Stacking/Switch_Stacks#Configuring_a_Physical_Switch_Stack   ... View more

Hi @Martinsen , As @PhilipDAth  has mentioned. The best option is to check the local status page on the switch. If all ok, then factory reset them. ... View more

No problem at all @van604 ... It is fairly new feature and sometimes I forget it is there. But when I do remember, it saves me a lot of time, going through pcaps & logs. ... View more

Hi @ITGOOKULAMKMK  Thanks for letting me know. So if the call connects and you get silence. Most likely the  RTP streams (it carries the audio) are being blocked or dropped. So, check for things like (1:1 NAT, port forwarding, etc) on the Firewall. Also, have your team check the logs on the PBX/Platform for any NAT/Port issues. ... View more

Hi @penangit ,   Try having a look at the Firewall Log monitoring tool.  If your MX firmware is 18.2 or newer. You can use this tool to display if the traffic is blocked. I would also suggest to check your Firewall rules as well. See guides below.   https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Logging   https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings       ... View more

Hi @ITGOOKULAMKMK ,   If your MX firmware is release 18.2 and newer you can use the Firewall Log monitoring tool. This will display the if the traffic is blocked or not.    https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Logging     You can also check the Firewall rules as well, just in case there is no traffic when using the Tool.     https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings       ... View more

Hi @vijaykumar , If you design your network right, you can have a single transit VLAN between the MXs via your switches. Then have the Switches act as Layer 3 routing devices between the downstream hosts and the MXs.   However, you really need to be careful how you can design this. https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair#Failure_Detection_2       ... View more

Nice!!!!! Well done!. ... View more