@DazKew wrote: A few of our customers use iPSK with Meraki and ISE, works brilliantly! same here. We just have to make sure that the mac-address is never changed or the system falls down to basic access based on the default PSK. ... View more

As we've seen this referenced on some cases recently, I'd like to clear up that the reference to a "cache clear" actually pertains to a "configuration fetch" issue. Root causes for these cases have been seen to be either a back-end change that Meraki Support is required to implement, or were found to be routing/allowed outbound port issues on the Azure side (as listed in the "Help>Firewall info" page).    I'm posting the above terminology so that any Support Engineer on your next case may be able to follow up on your request with more efficiency. ... View more

I wouldn't personally deploy an MS390 into a customer.  They have far too many bugs.  Just go take a look at the release notes for MS and look at the screeds and screeds of mentions about the MS390.   If you still want to use the MS390 make sure you get the MS Advanced licence.  Can't do adaptive policy without it.  Also note if you want to do it with MR you also need the MR Advanced licence.   You might want to check out this webinar to see it in action. https://meraki.cisco.com/webinars/adaptive-policy-set-once-secure-forever/      From my recollection of seeing it in action, you can apply the SGT tag at the port level. ... View more