Okay, thank you for the update. I was eager to try this in preparation for our summer iPad resets, so I wanted to check in and see if anyone had heard anything.  ... View more

I am logged in with an email address, password, MFA, and a full administrator, and I am still not able to generate an API key.   There's an option in the Organization settings way at the bottom to enable the API Generation. No one can do it until that's saved! ... View more

Plenty of bountiful goodness in this thread! Congratulations @serhansaridag, @Slobs2, and @Naveed ... View more

How can I verify if that was the case? The SFP+ port on the primary switch still shows as enabled: I've also tried multiple SFP ports on the secondary switch to no avail.  The primary switch is set as bridge priority 4096 in switch settings. All other switches would have default bridge priority.  ... View more

Creio que a melhor forma é o comprador entrar em contato com a Cisco ... View more

Hubo un error en esta respuesta, pues realmente no se solucionó en el panel que estaba sino en otro, que si lo tenían. ... View more

Per your query, yes, the IP should come from behind the MX.    As @DarrenOC noted, a good practice is to have a management VLAN setup. In this case, it doesn't matter that the switch is in front of the MX, you'd carve off one port and put it on (and restrict it to) the management VLAN, connecting it back to your LAN switch so that its communication with the internet/cloud has to pass through the MX and it can grab an IP via DHCP from the management subnet.  ... View more

Iv actually found something called replit that might work for python collaboration, however I am having an issue installing the meraki module via pip but thats a separate issue.   Thanks! ... View more

Configuration is stored locally so devices can continue to run. For something like the event log, it will be written locally until cloud connectivity is restored. https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Meraki_Event_Log   As for the local storage capacity and timeframe of storing local data, as far as I'm aware it's not publicly documented. ... View more

¿Has comprobado los niveles de potencia de la radio? Es posible que desee utilizar los perfiles existentes o crear los suyos propios para que los puntos de acceso no compitan entre sí. Recuerde también que el roaming es una decisión del cliente. ... View more

Hey @Slobs2, I’m sorry to hear we’ve missed the mark for you on this. It was a tough decision but know that contrary to your experience, we’ve had a lot of customers that have had problems when they try to split stacks into separate upgrades. That being said, we also hear that being able to upgrade stacks without interruption would bring a lot of value for customers like yourself so we’ll investigate to see what is feasible.  ... View more

Yes, create the VLAN on the MX, and then include that in Allowed VLANs on the uplink port to the MX on your MS. You only need to enable DHCP if anything in your Mgmnt VLAN is configured for DHCP. Personally, I assign all Meraki devices static IP's in the mgmnt VLAN. The only other reason you would enable DHCP was if you wanted to use the MX as the DNS server in that VLAN or any reason, in which case you just configure the DNS nameservers to "Proxy to upstream DNS" and reserve the entire IP range covered by the subnet.  Again, I don't use the MX for DNS on the management VLAN, I configure the devices to use Google (8.8.8.8) and OpenDNS (208.67.222.222).   Hope that helps. ... View more

I'm also interested in a real response as to why this would be difficult to implement or why the mdns client name is some kind of benefit to me.   This design limitation really wrecks the "at-a-glance" nature of the interface. ... View more

I'm with you there.  We had a new location stand up with full Meraki.  (32 MS390 switches, an MS425 Agg switch, an MX250 soon to be 2, 33 MR56 APs).  It was kind of a test for us to see if we could replace most of our Cisco with Meraki.  We just worked through a QoS/SMB file transfer issue that would determine if we go full Meraki throughout.  That test was successful, only because the Meraki support keeps us up to date, and is more than willing to work with us at any point.  So even if the product isn't 100% ready for prime time (which I do believe we are currently in that situation), I can still justify moving forward with them due to the support that we have received, and continue to receive.   I'm fairly excited for what the future holds for Meraki, especially with the new addition of the sensors and cameras.  Just have faith, Meraki will take care of you. ... View more

If you go to Security & SD-WAN -> Route Table, does the route table on the MXs show the IP addresses of the remote sites, and are they shown as being accessible via a Meraki VPN?   ... View more

Hey  @Slobs2,   thank you for your answer, it seems to me a suitable option!   ... View more

Unfortunately I'm trying to find inbound connections being blocked rather than outbound, so I'm not sure of the source IP. Perhaps I can try to do some digging with destination and see if that turns anything up. I tried checking syslog messages for multiple variants of "l7_firewall" but found nothing. Is this a string that shows up for you in the logs themselves? Are there other keywords that can be searched for that appear in these rejections? Edit: For example, when there is an IDS event, the syslog contains the string "security_event ids_alerted". I couldn't find any documentation for what logs are generated when a GeoIP rule gets triggered. Near as I can tell, this may not even be working. For example, I just saw an IDS alert for a command injection attempt from source IP in China, which should be getting blocked by the GeoIP rule. ... View more

Well lookie there. I just learned something. Thanks for the documentation link. That page is very helpful. 👍 ... View more

@FranckS  I would contact your Meraki sales rep and see if they can give you a trial license for SM that way you are actually comparing the full product, the free version is very cut down and has a lot of limitations.     ... View more

VRRP is automatic with the MXs. Put one IP on the primary MX, then another on the secondary and then a third on the virtual IP. Once that is set, you can either make one WAN connection the primary and the other a failover or you can load balance by IP/Network. See here for more detail. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences ... View more

@GlennGrossman Sorry for the slow reply.  Yes, if you configure and then establish a client VPN connection to your MX the users can RDP to the internal IP address of their desktop.  I have no first hand experience with RDP gateway, but there exists such a thing as enforced two factor authentication for RDP that might be good too.  https://duo.com/docs/rdgateway     ... View more

Make a packet capture on port 23 and see if the switch send a dhcp  discover and gets  a offer back on vlan 100.  Or try set a static ip or vlan 100   ... View more