cs.co/am-licensing#ga   > Claiming a free trial license or paid license will automatically transition you to the GA experience within 36-48 hours. ... View more

You could consider using self-registration with a splash page. https://documentation.meraki.com/Wireless/Operate_and_Maintain/How_Tos/Splash_Page/Self-registration_for_Splash_User_Accounts   You can either have these automatically given access or require them to be approved by an admin. ... View more

I have not been able to get username/password authentication to work in any Entra tenant that Microsoft has migrated their authentication methods (and this is a compulsory migration for all tenants).   As a result, I only use certificate-based authentication now.  I like use Microsoft Cloud PKI for my issuing CA, and use Intune to do the certificte deployment. https://learn.microsoft.com/en-us/intune/intune-service/protect/microsoft-cloud-pki-overview  ... View more

Yes.  Note that only Entra ID is supported as an external authentication source at this point in time. ... View more

Thanks ... View more

The syslog messages are sent directly by the device.   If you do a packet capture on the edge do you see udp/514 traffic? ... View more

No, unfortunately not. In that case, consider using 802.1x.   Note: The device will still receive an IP address and will be able to resolve DNS names. Note: The EAP exchange will still be allowed for wireless clients, and devices will be able to associate with an SSID. The block will apply to client traffic after the 4-way handshake is completed. ... View more

Thanks  ... View more

Can you check the upstream firewall to see if it is blocking any traffic from their management IP addresses?   Try plugging into the management port, and check the local status page.  Does it say what is wrong?  If you can't spot anything that helps, while you are there, download a support bundle.  Attach that bundle to any case that you open with Meraki for help. https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page#MS_Series_(includes_Catalyst_Meraki-Managed_mode_switches)   You could try arranging a time to perform a power cycle on the switch(es).  You might get lucky.   Once you get them back online, it was pretty common with older IOS-XE versions - try upgrading the firmware to the current stable release.   ... View more

If you connect to the local status page on one of the switches that has lost connection, what does it say? ... View more

I have solved the problem ... View more

I was having similar issues with a MS390 upgrade to 17.15.3.   I spent a month back and forth with TAC on trying to get the upgrade to go.    Finally yesterday TAC responded that their is a bug if you have 7  or more dscp to cos rules in qos mappings.   I removed my mappings and on the next cycle the MS390 finally upgraded to 17.15.3 ... View more

If you are doing L3 routing then make sure that the management IP is static.  What features are you using as some are not yet supported? ... View more

You can't do it yourself...   from the document that Alex linked:   Everything is ready Once everything is confirmed to be set up and you are ready for the migration, initiate a migration from Meraki mode to DNA mode by raising a case with Meraki support. ... View more

Check out this https://documentation.meraki.com/MS/Deployment_Guides/Getting_started%3A_Cisco_Catalyst_9300_Management_with_Meraki_Dashboard Once in Meraki Mode there will no longer be console access ... View more

In early access (organization -> early access) you can enable the VLAN profiles feature. In there you can create VLAN names for VLAN ID's.  And subsequently you can use them on access ports and for native vlan in trunks. https://documentation.meraki.com/General_Administration/Cross-Platform_Content/VLAN_Profiles You can also define VLAN groups there which are comma lists of VLAN ID's for use on trunk allowed vlan lists. ... View more

Please note: C9K/MS390 runs single instance (0), single region (region1), and single revision (revision 1) MSTP. This is essentially Rapid Spanning-Tree. Please make sure for interoperability with any other non-Meraki platforms, to either run Rapid Spanning-tree or MSTP (not PVST or any iteration, nor any other vendor specific STP implementation). This will ensure that there are no issues with compatibility and functionality. https://documentation.meraki.com/MS/Port_and_VLAN_Configuration/Configuring_Spanning_Tree_on_Meraki_Switches_(MS) ... View more

Hi Shlomoi,    A combined Network is a mix of All of your Meraki equipment networks, MX, MS, MR, MV, MT and SM. Based on the image you provided I am assuming you are creating the SM network for the first time and in that case you will want to select the Network Drop down next to Combine hardware to EMM.  Please let me know if that helps or if you are in fact attempting to split your SM network away from an existing network as that requires a number of different steps.  ... View more

I believe this means the AP became unreachable for the client, which could be because the client is moving around or some other form of interference. There could also be a software bug on the AP or the client's nic drivers, it's hard to know without more data. Meraki Support may be able to quickly identify something if you give them a ring. ... View more

Two features you can adjust gradually without breaking too much are to increase the min rate and reduce the transmit power. But better let someone do a validation who knows how this works. ... View more

Thanks @GreenMan, so perhaps the 2025 timeline I was given referred to a subsequent native IOS-XE release, makes sense now. ... View more