Port mirroring is typically used for troubleshooting, or special traffic conditions (eg voice recorders for VOIP). It would not be a good idea to use this for the purposes you're describing. Instead, as suggested above you should be able to achieve your outcome by simply tagging the WISP uplink traffic onto an unused vlan to send it across the fiber to the MX WAN port - Both the WISP cat5 port and the fiber port going to the MX tagged as access ports.   With that said, the best option is to have the ISP run the to MDF instead. ... View more

Check out this guide on what causes WAN failover: https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Connection_Monitoring_for_WAN_Failover    Note that your connection to the ONT could be 100% stable, but if your ISPs DNS is having an issue or your ISP is having upstream connectivity issues, a failover can still occur.   I had one case where the ISPs connectivity to Google's 8.8.8.8 DNS server was unreliable and caused WAN failovers.   ... View more

I really appreciate both of your responses, I hope you didn't feel anything but that appreciation.   We're reaching out to our rep to see if anything can be done to enable the feature. I understand that even a small change can be significant, but it really feels worth quite a bit to me as a network operator.  This problem, where our DHCP clients in network A have Internet connectivity but no DNS connectivity to network B where the DNS servers live (for varying reasons), is one that clients end up experiencing way more than they need to, at least in my world.   I think the benefit is large and it's another thing that makes a Meraki network 'just work' even when components on it don't. ... View more

How helpful, thank you.  I don't know why I didn't find that myself. ... View more

Is the performance problem that you described restricted to the testing you conducted? Does conventional internet traffic experience the same?   Was your test to the data collection folder using windows file sharing, SMB?  Does all traffic over this VPN behave like this on the affected link?  That SQL traffic is also slow?   While fragmentation may be an issue, I'd not exclude other problems creating the slowness you described. ... View more

The last test I ran still showed a few crazy readings on the 6th, ok since then.   I'd guess they are near resolution, but still need to wait for formal confirmation.   ... View more

Thanks, yeah after reading the release notes it sounds like that might be the fix. I'll wait until it's in stable vs stable release candidate due to impact on operations for us but this is good to know. Thank you!  ... View more

Me too, L7 NBAR blocking is nothing but a pain.  Need to be able to add ALLOW rules and specify src/dst to make it useable ... View more

Just had this EXACT problem on a MX85 (both WAN ports). Disabled EEE on the uplink switch, port is now stable. Do anyone know if there is a bug on this ? (its not anywhere in the release notes). ... View more

I don't think there is a choice, at least not for me. I can only delay firmware upgrade until sometime in May it seems.  Clients won't be thrilled that we can't use the layer 7 rules that they want though. ... View more

Same things here. Blocked DNS requests as "XBOX Live" 😞   Disabled NBAR in Traffic analysis but i would like to maintain it to "detailed" and "all gaming" L7 rules! Please fix!     ... View more