It is only used for SD-WAN connectivity (and potentially client VPN).   This is the deployment guide.  I would recommend changing to "passthrough" mode before deployment. https://documentation.meraki.com/MX/MX_Installation_Guides/vMX_Setup_Guide_for_Microsoft_Azure  ... View more

No, the MX itself cannot be a Radius server, but you have some authentication options and even integration with AD. Follow the documentation.   https://documentation.meraki.com/MX/Access_Control_and_Splash_Page/Access_Control   https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Configuring_Active_Directory_with_MX_Security_Appliances ... View more

Look at this:   https://community.meraki.com/t5/Switching/Multicast-Basic-s/m-p/25706     ... View more

In an authentication scenario the laptop does not directly "talk" to the Radius server. It is the switch or AP that "talks" to the Radius server (hence, why you setup those devices as "NAS" devices on the Radius server).  But something is going on. Try looking at the windows client eventlog for authentications (if nothing shows up on the radius server logs that is). The switch should send a EAP-Id request when the session timeout happens (try verifying with a packetsniff). If it does not, well, then there is a problem, because your client would not know that the session has ended, and would still think it is connected.   There is also a very old Windows 7 bug where the windows firewall would actually block all traffic for x amount of time, whenever a session timeout happened, as far as I remember. ... View more

Just an update; service provider did not provide us /29. What we did was to utilize the 2nd 4G uplink (MG21) so that MX1 gets two uplinks ( fiber + 4G) , and MX2 ends up with 1 uplink (4G). We made sure that both MX1/MX2 are connected to a LAN switch with trunk ports for keep alive mechanism. We dropped MX1 and failover worked.  ... View more

It is possible to have your VMX Hubs configured not to have direct AutoVPN tunnels between them (call Support for this).   Note that this is an 'all or nothing' switch for all Hubs in your Organization.. ... View more