If I get bored, I'll put in a feature request to Duo to add this to the "easy" setup.   I have previously asked them to add a field for AWS, and they did! ... View more

Your conclusion is correct !    My pleasure ! ... View more

The data sheet does say that, but it also says that both models have the same stacking hardware. which is two 40g ports. Switch vendors sometimes list bandwidth numbers in their marketing as doubled, for example, counting each 10g port as 20g, because it is full duplex, and 10g in each direction is 20g. It seems that they are doing that for the MS350, counting the two 40g ports as 80g each, for a total of 160g. Is this the case, or is there some other way that the MS350 can provide 160g of stacking with two 40g ports? ... View more

nop, the switch with the lowest MAC address takes master role. ... View more

As promised here is the answer from the Support: This type of behaviour is expected when using port profiles and templates, please refer to the following documentation that states this behaviour: https://documentation.meraki.com/MS/Port_and_VLAN_Configuration/Switch_Port_Profiles#:~:text=The%20configurations%20from%20Port%20profiles,and%20it%20is%20expected%20behavior   As highlighted in the blue box, this is expected and I was advised to use the Feedback option from the Dashboard which I did. Maybe we will see some changed one day :). Thanks everyone! ... View more

Thank you - much appreciated! ... View more

I can't comment on any sort of roadmaps as a whole unfortunately, but if you want to try and confirm this is the problem, take a pcap on your MX and look at the RADIUS traffic. If the last thing you see is an access-challenge packet containing the AVP I described above, yeah that's confirmation on the problem. ... View more

I believe the reason it because I have been used to work with the ASA Firewalls, where most of these rules defined whether you wanted to go to another network locally or if you tried to reach another network via your IPSEC tunnels.  That's basically it. So now I just have to think different and the fact it is "splitted". If you ask me in one month, when I have created, changed and deleted rules then I might say it makes a lot of sense 🙂 ... View more