UPDATE-- When I had Meraki support make the last change, I haven't had a single issue since. Were going on 2+ weeks with no dropped tunnels, no half tunnels, no issues with SAs. ... View more

All I have the exact same issue. And worked with Meraki to resolve: I have an MX68 on one end and an ASA5525 on the other.  The MX is running MX14.39 Code and the ASA is running 9.8(3)-18 code. I have the Phase 1 and Phase 2 times set exactly the same 86400 and 28800 respectively.  After reading this posting, I went ahaead and called Meraki and had them disable NAT-T on the Meraki.  The also mentioned that they had Dead Peer detection enable, and suggested I enable it on my ASA.  So I went ahead and added " isakmp keepalive threshold 10 retry 5" under the tunnel group ipsec-attributes.  Meraki stated that these setting match the values used on the MX by default.  I just made the change so lets see how long it lasts.  At this point my tunnel would drop almost everyday.  Its Friday now, I should know for sure by Tuesday.  I will reply back once Tuesday comes.  ... View more

This is an OLD post, but I wanted to add my own experience with Disabled Switch (Bad DNS).  The Error, is just a bad Error, written poorly by Meraki Programmers.  It leaves the engineer with no real guidance as to whats wrong, not where to look.     In my Case, my customer moved their switches from DHCP to Static, When they did that, some of their switches ended up with Duplicate IPs.  The duplicated IP switches remained "online" in the dashboard, and showed "disabled Switch Bad DNS".  Even Cisco Switches in their logs show "Duplicate IP".  What can't Meraki do the same and give a clear log entry for it.  Any way if your reading this, everything everyone else is saying here is definitely worth checking, but in my case it was duplicate, IPs.  Make sure the management IPs of your gear is not duplicated anywhere. ... View more

When I attended Cisco Live, I asked the Meraki Distinguished MX engineers, and they told, me they were not aware of many requests for this feature. I asked him if he's ever heard of google, "try it some time". I don't think anyconnect is a very high priority to Meraki. I also learned that the method that Cisco and Meraki use to share technologies isn't very efficient, which explains why they don't support EIGRP as well. ... View more