It all depends on the flow of the expected traffic. i.e. If the SFTP client is initiating the connection. Then no issue, it's what Firewalls' were built for. Simply put a firewall rule and port forwards/nat in place to limit the port and hosts. Something like the below. You could also pop the client in it's own DMZ as well. Just need to be very specific with Source and Destination hosts. https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Active_and_Passive_FTP_Overview_and_Configuration Cheers, Ivan ... View more

Thanks @Ryan_Miles . Forgot to mention the deletion of leases. ... View more

Hi @razortas,  DHCP Discover messages will be broadcast out on every VLAN in order to get an IP Address from any server that is listening in those VLANs. For a micro-period, it can be possible, depending on the VLAN design. However, these should be sorted, once the clients get a valid lease. The client should stop broadcast the DHCP Discover message. Need to find out more information. So, in your circumstance; Is the MS130 continually sending DHCP messages for an IP Address? If so, how often and what is the lease time set to in the DHCP Server? Which VLANs is the DHCP server leasing IP address? Which VLAN is set for Switch Management? Cheers, Ivan ... View more

I Agree with PhilipDAth. Best option. The End of Support date is Sep 28, 2029. So it will be supported til then. "Available in 2 different port densities, 16 or 32 x 10G SFP+, both of which include 2 × 40G QSFP+ uplink/stacking ports " https://documentation.meraki.com/MS/MS_Overview_and_Specifications/MS425_Overview_and_Specifications Cheers, Ivan ... View more

Hi Avif, I've seen this a number of times in the distant past when content providers and such, have incorrect GeoIP records. I would suggest to contact Meraki Support for further assistance with this issue.   Cheers, Ivan ... View more

Hi Lloyde, The default WAN MTU on MXs is 1500 bytes. May I ask why you looking to lower MTU Size?   Cheers, Ivan   ... View more

Hi Oscar, It could be a cosmetic bug. I suggest to call in with that case and have the Support Engineer tshoot live with you. I have seen some cases like this, where it is a cosmetic error.   Cheers, Ivan ... View more

You can disable a VLAN/Subnet from participating in AutoVPN so it is not advertised to other MXs. Also you could use the Outbound VPN Firewall to block certain traffic as well..   https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#Local_networks Cheers, Ivan     ... View more