New articles: Off-boarding Process for Catalyst Cloud Management Devices in Monitor-Only Mode in India, Canada and China Regions Change: New article.   How-to Guide: Use the Vision Portal Maps Change: New article.     Access Manager: Access Manager Change: Added "In rare cases of temporary system failures with external dependencies like Microsoft Entra ID, user or client attributes may be skipped, and policy evaluation will proceed to the next rule. Write each rule to be self-contained and do not assume that reaching a rule means all previous rules evaluated to false."; added MAB condition for Client Group Access Rules.     Security & SD-WAN: vMX Setup Guide for Microsoft Azure Change: Added note regarding Microsoft’s announcement to retire the Fs_v2 instance.     Switching: Cloud Configuration: Release Versions and Highlights Change: Added section "IOS XE 17.15.5 Release Highlights and Important references".   Migrating Switches From CS Firmware to IOS XE Firmware Change: Updated key points in "Migrating Layer 3 Switches: Pre-configure L3 switches to reduce reconfiguration after upgrade": "Ensure that an uplink SVI (VLAN interface) exists on the Routing & DHCP page, in the same subnet as your management interface. We recommend moving your management interface into the same VLAN as the switch's default route to the Internet. If the default route to the Internet is via VLAN 10, move the management interface of the switch to VLAN 10."   Layer 2 Multicast and Troubleshooting Change: Added "L2 multicast table live tool is only available on firmware version 18+".   Cloud Management with IOS XE Overview Change: Added "When you change your preferred uplink, the previous uplink is removed from the Allow List. To use it again as a candidate uplink, you must manually re-add it."   Cloud Management with IOS XE Change: Added C9350 to "Device Configuration".     Wireless: AI PCAP Analyzer Change: Added section "Color Scheme".   Wireless Encryption and Authentication Overview Change: Added "dot11w.enabled must be true".     Cameras: Third Generation MV Cameras: Overview and Specifications Change: Added vertical Field of View for MV73M/MV73X: "Vertical: 59.6°-19.9°".     Sensors: MT10 Installation Guide - Temperature and Humidity MT11 Installation Guide - Probe Sensor MT12 Installation Guide - Water Detection MT14 Installation Guide - Indoor Air Quality MT20 Installation Guide - Open/Close Detection MT30 Installation Guide - Smart Automation Button Change: Added section "Replacing Batteries".     Platform Management: Configuring SAML SSO with Microsoft Entra ID Change: Added "For Government cloud customers in this article you see x.meraki.com that it should be x.gov-meraki.com."; added "End users can login to the Microsoft Entra application portal to access the Meraki dashboard login application. The URL for this portal is https://myapps.microsoft.com."   Organization Split Overview and FAQ Change: Added "Access Manager networks" to "Limitations of Organization Splits".   Syslog Server Overview and Configuration Change: Added "Due to a now resolved issue, encrypted syslog deployed in a Configuration Template prior to March 6, 2026 will not work properly and will not send encrypted or unencrypted syslog. To resolve this, delete and then readd the encrypted syslog server entry in the Configuration Template."   Information for Cisco Meraki for Government users Change: Added CW9171 and CW9174.   Meraki and Catalyst Center Global Overview Change: Updated prerequisites: "Catalyst Centers with 5,000 total devices managed is supported."   Network Move / Network Portability Overview Change: Added "Networks with no devices." to list of restricting conditions.   Meraki MX/Z Security and SD-WAN Licensing Change: Added restriction for networks bound to a template: "Assigning the Per Dev SDW+ SKU to a network will give that network access to all of the below SD-WAN features except configuration templates."   Packet Capture Overview Change: Added "An access port is assigned to one specific VLAN and only communicates with that VLAN. If a frame arrives for a different VLAN, the MX filters this traffic at the OS or hardware level depending on the model, so this traffic may not be visible in MX packet captures."   Syslog Server Overview and Configuration Change: Added "If outbound syslog traffic is blocked with a site-to-site VPN firewall rule that is syslog-enabled, the blocks will be logged for each generated syslog packet, and they will not reach the configured syslog server." ... View more

  New articles: C8111-G2-MX and C8121-G2-MX Data Sheet C8111-G2-MX and C8121-G2-MX Installation Guide Change: New articles.   Cisco Secure 8000 Series Router with Meraki OS Ordering Guide Change: New article.   VRF for WAN Appliances Change: New article.   vMX Setup Guide for ESXI vMX Setup Guide for KVM Change: New articles.   Cisco Cloud Entitlement for DNA Change: New article.   Cloud Managed EVPN Fabric Technical Guide Change: New article.   Suggested Actions on Unreachable Devices Alert Change: New article.   AI Optimizations Change: New article.   Migrating Switches From CS Firmware to IOS XE Firmware Change: New article.     Access Manager: Access Manager Change: Added additional anchors: #policies, #demo, #demos, #attributes, #conditions, #attrs, #attribute-sources.     Workflows: January-March 2026 Change: Added release notes for the "February 6, 2026" and "February 20, 2026" releases.     Security & SD-WAN: FIPS 140 Devices and Firmware for Cisco Meraki MX Access Policies (802.1X) MX Sizing Guide and Principles Security and SD-WAN (MX,Z) Features Directory MultiWAN Change: Added C8111-G2-MX and C8121-G2-MX.   Cisco Secure Access Integration - Design Best Practices Change: Added "During the Early-Access period for this feature, organizations deploying below Design B (Any Spokes with Hybrid and Cloud Hubs) can accommodate up to 1,000 Spokes and 2 MX Hybrid Hubs. To address broader deployment needs, increased scale for Spokes and Hubs is being validated for the product release. If the design you intend to use is not documented here, please contact your account team. Several common scenarios have been identified for additional validation after the initial release and will be incorporated into this document as appropriate."   MX Warm Spare - High-Availability Pair Change: Added "MXs operating in HA cannot have more than 255 VLANs configured."; added "MX devices in HA randomly assign a VRRP VRID between 1 and 255 at boot. For a static VRID, please contact Support for assistance."; updated Warm Spare compatibility "The spare MX must be the same MX model as the primary. Warm spare functionality is not supported between different MX models (for example, MX85 and MX105) which also includes MXs with the same model but different territorial designations (e.g., MX67C-WW and MX67C-NA)."     Switching: Cloud-Managed Switching Warm Spare (VRRP) Overview Change: Added "Dynamic Routing (OSPF/BGP): With Cloud managed switches, dynamic routing (OSPF/BGP) are supported with VRRP enabled on the switch."   Cloud Managed Catalyst Switches FAQs Change: Added "Cloud-born Catalyst switches (-M) require Meraki licenses, with a 30-day grace period for onboarding to the Meraki Dashboard. Eligible migrated switches can use existing DNA licenses for cloud management until February 1, 2029 - no additional license migration or transfer required. Learn more: http://cs.co/9004hmri2".   Enable Cloud Management for Catalyst Switches with Device Configuration Change: Added section "Known Issues and Limitations".   Cloud Monitoring End of Service - Transition to Cloud Management - Configuration Source: Device Change: Added section "Required Actions for Switches Not Migrating to Configuration Source: Device Before March 31st (Cloud Monitoring Decommission)".   Switch ACL Operation Change: Added "By default, mDNS cannot be blocked by an ACL; if you require mDNS to be blocked, please contact Support. This does not apply to CS or cloud-native IOS-XE managed Catalyst/MS390 switches."   Upgrading Cloud-Monitored Switches to Cloud Management with Device Configuration Change: Added "When adding stacked switches, all members of the stack must be selected to add to network."; added "Organizations using per-device licensing must use the network-wide add devices page."   MS Switch Access Policies (802.1X) Change: Updated RADIUS monitoring behavior: "RADIUS Testing should be enabled by default in the new Access Policies UI so that RADIUS Monitoring can track server reachability. A configuration change on a policy using Critical Authentication may be required on the new Access Policies page to enable RADIUS testing."   Cloud Management with IOS XE Overview Cloud Management with IOS XE Cloud Managed Catalyst Switches FAQs Conversion from CLI-managed IOS XE Catalyst Switches to Cloud Management with Cloud Configuration Change: Added note regarding new Cloud Entitlement for DNA offering.   Client-Tracking in IOS-XE Change: Added "During onboarding of a C9500 to Device Configuration mode, device tracking will not be modified. Users can choose to modify it via CLI after onboarding."; added "During the onboarding, the above tracking policies will only be applied to interfaces without existing device tracking configuration."; added "When the Meraki device-tracking policy is removed from the interface after the onboarding it will be re-applied automatically. If the policy is replaced with a custom (non-Meraki) policy it will not be overwritten."   Cisco Meraki Local Status Page: MS Switches Cisco Meraki Local Status Page: Catalyst IOS XE Switches Change: Added "Any changes on local status page are only intended to be used when necessary to get a switch connected to the dashboard. Before making any changes on the local status page to bring a switch online, ensure the same changes are applied in the dashboard first. Failing to do so will cause the device’s configuration to be overwritten by the dashboard configuration, which may cause the switch to go offline."     Wireless: AP Auto Locate Change: Added Wi-Fi 7 APs; added sections "Ultra-Wideband (UWB) Enhanced Client Wayfinding" and "Wayfinding Status (per floor)".   Air Marshal Change: Added "Air Marshal may flag legitimate Wi-Fi Direct SSIDs since Wi-Fi Direct allows simultaneous peer-to-peer and infrastructure WLAN connections."   Campus Gateway Deployment Guide Change: Added "Campus Gateway and Access Points must be in the same Meraki Network. Tunneling across networks is not currently supported."     Cameras: Meraki Vision Portal Changelog Change: Added release notes for up to v1.26.10.     Platform Management: Subscription - MS Licensing Change: Added "StackWise Virtual", "ISSU" and "Cloud EVPN Fabric".   Control Mode of Unified Suites Change: Renamed from "Managing Cisco Networking Subscription on EA".   Returns (RMAs), Warranties and End-of-Life Information Change: Added "C8455-G2-MX".   SNMP Overview and Configuration Change: Added "Starting with MCG 32.2.1, Campus Gateway will support SNMP monitoring only using SNMP V3 with Privacy Mode AES128. SNMP V2C is not supported with Campus Gateway."   Network Alerts and Notifications Change: Added "It is expected behavior that this alert will omit details from successful events and will only send a summary of the changes."   Dashboard Alerts - Connectivity Issues Change: Added "AP Connection to Sensor Connect Down".   Cisco Meraki Dashboard API Change: Updated the Authorization header: "Authorization: Bearer <secret key>".   Cisco Meraki Canada Region Cisco Meraki India Region Change: Added Access Manager to the list of unsupported features. ... View more

  New articles: Managing Access for Organization Users Integrating Microsoft EntraID as an External IdP on the Organization Users Page Organization Users Change: New articles.     SASE: Cisco SASE: Getting Started Guide Change: Added "Any new MX models released after January 2026 are currently not supported (example: C8455)."; added "Currently enrolling large number of sites at the same time is supported using templates only."   Cisco SASE: Sites Connectivity Change: Added "Currently enrolling large number of sites at the same time is supported using templates only."   Secure Connect to Secure Access Manual Migration Guide Change: Added "Currently enrolling large number of sites at the same time is supported using templates only."; added "It is highly recommended to test connectivity with test users prior to migration maintenance window. This will ensure that all policies are configured correctly."     Security & SD-WAN: MX Routing Behavior Change: Added "Use cases for static routes should not exceed a recommended maximum limit of 1000 static routes."   Client VPN OS Configuration Change: Added section "A note on IKEv2".   Adaptive Policy for MX/Z Platforms Change: Added section "Assignment via Group Policy".   MX and Z-series Source IP for RADIUS Authentication Change: Added "The above behavior also applies to Active Directory authentication traffic."   MultiWAN Change: Added "Only WAN 1 and WAN 2 can be configured from the Local Status Page."   Cisco 8000 Series Secure Routers Frequently Asked Questions (FAQ) Change: Added FAQs "I wish to use the C8455-G2-MX in warm-spare High Availability (HA) Mode. How do I order my licenses and (or) use them?", "I wish to use the C8455-G2-MX in the Unified Branch solution. Is the platform supported and should I use any specific license?", "I am currently using the capabilities provided by Meraki Insights (Web App Health, WAN Health and VoIP Health) ? Does the C8455-G2-MX support these capabilities?" and "I wish to use Secure Connect/ Secure Access with the C8455-G2-MX. What features or protocols may I use to connect on the fabric side?".   Client VPN Overview Change: Added sections "Key Considerations" and "IKEv2"; added "When the IP address of the RADIUS authentication server is reachable over site-to-site VPN, the source IP used for the RADIUS traffic will be that of the highest-numbered VLAN that is VPN-enabled. If there is no VPN-enabled VLAN or the MX is in passthrough/concentrator mode, the IP address will be within 6.0.0.0/8 (6.x.y.z)."; added "When the IP address of the Active Directory authentication server is reachable over site-to-site VPN, the source IP used for the LDAP traffic will be that of the highest-numbered VLAN that is VPN-enabled. If there is no VPN-enabled VLAN or the MX is in passthrough/concentrator mode, the IP address will be within 6.0.0.0/8 (6.x.y.z)."     Switching: Enable Cloud Management for Catalyst Switches with Device Configuration Change: Added "When adding Catalyst switch stacks to a network, please include all stack members."   Cloud Management with Device Configuration Required Modifications Change: Added configurations for Netflow and Device Tracking.     Wireless: Campus Gateway Deployment Guide Change: Added "At launch, APs and Campus Gateway should be part of the same geographical location with a RTT of less than 20ms."   Connecting Cisco 9800 Wireless Controllers to Dashboard Change: Added "After a C9800-CL is claimed into the Organization inventory, it will be unable to be unclaimed as it will be retained for future use. If a C9800-CL does need to be unclaimed, please contact Meraki Support."     Systems Manager: Systems Manager Agent and MDM Profile Enrollment Change: Added "Please note, the agent will require making PPPC adjustments on macOS 10.14+".     Platform Management: Dashboard Alerts - Configuration Issues Change: Added "Session modules conflict in HTTP Server".   SP-Initiated SAML SSO Configuration Guide Change: Added Vision Portal URL "https://example.sso.meraki.com/vision" to section "Defining a unique subdomain for your organization".   Best Practices for Meraki Firmware Meraki Firmware Release Process Managing Firmware Upgrades Cisco Meraki Firmware FAQ Change: General article updates to incorporate new firmware stages: Beta, Generally Available (GA) and Recommended Release. ... View more

  New articles: Meraki IPSec to AutoVPN Secure Access Manual Migration Guide Change: New article.   vMX Setup Guide for Megaport MVE Change: New article.   SASE Change: New category.     Access Manager: Access Manager Change: Added "It may take up to 24 hours after claiming your Access Manager licenses before you see the Access Manager menu item in your organization dashboard."     Secure Connect: Cisco Secure Connect Reserved IP Change: Updated data center name for Tokyo, JP: "NRT2".     Security & SD-WAN: Local DNS Service on MX Change: Updated prerequisite: "'Proxy to Upstream DNS' Enabled for the respective subnet".   Meraki and ThousandEyes Integration Troubleshooting Change: Added section "Account Unlinking".   Meraki MX ThousandEyes Configuration Guide Change: Added section "Unlinking an Account".     Switching: Switch Stacks Switch Cloning Troubleshooting and Replacing a Faulty MS Switch Change: Added "For Catalyst switches (including MS390) on CS firmware, it is required you power down the entire switch stack before adding / replacing a new member to avoid packet forwarding or configuration sync issues. This is only a requirement for stacks on CS firmware and not needed for stacks running IOS-XE firmware."   Cloud Management with Device Configuration Required Modifications Change: Added "All changes to configuration made by Dashboard will be logged in Organization > Monitor > Change Log and associated with the default administrator for the Dashboard organization."   MS210 Series Installation Guide MS225 Series Installation Guide MS450 Series Installation Guide Change: Added "Region-specific power cords are not included in the box. Order the appropriate power cord separately: MA-PWR-CORD-US, MA-PWR-CORD-EU, MA-PWR-CORD-UK, MA-PWR-CORD-CN, MA-PWR-CORD-IN, MA-PWR-CORD-BR, MA-PWR-CORD-TW, MA-PWR-CORD-AU, MA-PWR-CORD-AR, MA-PWR-CORD-JP".   Conversion from CLI-managed IOS XE Catalyst Switches to Cloud Management with Cloud Configuration Change: Added "C9500s cannot be onboarded as a stack. Please remove the StackWise Virtual configuration, reboot the switches, and onboard as standalone switches."   Cloud Monitoring End of Service - Transition to Cloud Management - Configuration Source: Device Enable Cloud Management for Catalyst Switches with Device Configuration Upgrading Cloud-Monitored Switches to Cloud Management with Device Configuration Change: Added "Help us improve your experience. Complete this quick survey to share your feedback on Cloud Monitoring or Configuration Source: Device."   Upgrading Cloud-Monitored Switches to Cloud Management with Device Configuration Change: Added "To onboard Catalyst switches using Cloud Management - Configuration Source: Device, select "Try new version" in the top right corner of the Inventory page to access the new onboarding experience."   Cloud-Managed EVPN Fabric Overview Change: Updated reserved IP address range: "Subnet (172.16.0.0/16) used for underlay, this subnet can be changed during fabric creation in the wizard."     Wireless: Low Power Mode and PoE negotiation Change: Added "Access points that are not operating on MR32.1+ firmware versions will continue to see previously available limited PoE information."; added "Supported APs".   Meraki Local Authentication - MR 802.1X Change: Added "RADIUS Failover and Recovery Logic"; added "Extended Local Auth Caching"; added "Operational Distinctions".   Seamless Meraki Integration with Cisco Spaces Change: Added "Only Meraki Organization administrators with full read and write access can activate the integration, per the Spaces setup documentation. Due to this, SAML dashboard administrators cannot action the integration process."   MR Meraki RADIUS 2.0 Change: Added section "RADIUS Accounting Device Profiling".   Sponsored Guest Change: Updated number of sponsor guest mail domains: "The maximum number of sponsor email domains that can be added at any one time is 50."   Adding Cisco 9800 Wireless Controller and Access Points to Dashboard Change: Added "Existing onboarded access points can be moved to another network only after changing the Access point assignment. Follow the guidelines for access points at Moving Devices between Networks. APs that are moved prior to changing the access point assignment will automatically move back to their original network."   WPA3 Encryption and Configuration Guide Change: Added "If a network has SuiteB - 192 Bit SSID configured on a lower number SSID, Dashboard will show an alert stating Wi-Fi 7 cannot be enabled because the following SSIDs do not meet the security requirements."     Cameras: Video Exports: Overview and Management Change: General article re-write.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.26.7.     Systems Manager: Enrollment and Self-Service Portals for Systems Manager Change: Added "This portal is accessible via enroll.meraki.com to provide a method of manual enrollment."     Platform Management: Returns (RMAs), Warranties and End-of-Life Information Change: Added section "RMA Processing For Outdoor Cameras".   Blocking and Allowing Clients Change: Added "Placing a client on the "Block list" will block both LAN and Internet traffic."   Troubleshooting MTU Issues Change: Added "If your packet is traversing over an IPSec (non-Meraki) VPN, you will need to account for up to 100 bytes of overhead."   Mandarin Support Hotline Change: Added section "2026 Public Holidays for Mainland China".   Dashboard Alerts - Device Health Change: Added "Potential Hardware Fault".   Organization Summary Change: Added note regarding beta participants being transitioned back to the original Organization Summary page.   Clients List and Details Page Overview Change: Added "The same policy can then be applied to all the selected client(s). Note: The tool will default to "Normal" upon first opening as selected clients might have different existing policies applied to them."   Dashboard Alerts - Configuration Issues Change: Added "Bad IPv6 Assignment Configuration".   Manually Integrating Cisco Umbrella and Secure Access with Meraki Networks Change: Included Secure Access.   Clients List and Details Page Overview Change: Added "For cloud-managed C9000 in device configuration mode, client visibility requires a DNA Essentials license. Application visibility requires a DNA Advantage license".   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added "C8455-G2-MX: The compatible SFP modules on the C8455-G2-MX can be found in the Here.   Subscription Feature Tier Update Change: Added "Each API call can update up to 500 Networks." ... View more

  New articles: Meraki and Catalyst Center Global Overview Change: New article.   Cisco Meraki Local Status Page: Overview Cisco Meraki Local Status Page: Security and SD-WAN Cisco Meraki Local Status Page: MG Cellular Gateways Cisco Meraki Local Status Page: Catalyst IOS XE Switches Cisco Meraki Local Status Page: MS Switches Cisco Meraki Local Status Page: MR Wireless Cisco Meraki Local Status Page: Campus Gateway Change: New articles.     Security & SD-WAN: Meraki and ThousandEyes Integration Troubleshooting Change: Added troubleshooting use case: "The Meraki Administrator account was deleted and the integration is non-functional".   MX Cold Swap - Replacing an Existing MX with a Different MX Change: Added "Adding or replacing an online/offline spare MX in the dashboard network will cause a brief connectivity loss on the primary MX due to the initialization of the HA configuration."     Switching: MS Switch Access Policies (802.1X) Change: Added "RADIUS defaults are: RADIUS authentication attempt = 3 times. RADIUS authentication timeout = 5 seconds. Please note that those values cannot be modified."   Cloud Configuration: Release Versions and Highlights Change: Added "UAC Automatic Fallback to Preferred Uplink (new with 17.15.4.1+)".   VRF Change: When running a traceroute to an IP address within a VRF, you must specify the VRF or else the traceroute will fail. Sourcing traceroute from a specific VRF can be done under the Switch Details, Tools page.   SecurePort Change: Added "As a best practice, MRs and MS should belong to the same network. If your APs and switches must belong to different networks please contact meraki support."   Enable Cloud Management for Catalyst Switches with Device Configuration Change: Added section "Prerequisites".   IOS XE image upgrades (Cloud Monitoring for Catalyst switches) Change: Updated Caveats/known issues: "Image upgrade is currently only supported on the following target versions of IOS XE:17.9.4a, IOS XE 17.9.5 or IOS XE 17.12.3, 17.15.3 and 17.15.4."   Cloud Monitoring Overview and FAQ Change: Added "Switches operating in "Configuration Source: Device" mode are not supported for cloud-initiated firmware upgrades".   VLAN Profiles Change: Added sections "Configuring the VLAN Database from the Local Status Page" and "Modify the active VLANs from the Local Status Page".     Wireless: Splash Page Details for Meraki MR Change: Added "25 Free SMS text messages. This feature is currently only available in the United States. If you are in a different country, SMS authentication is still a beta feature, and we cannot guarantee its reliability."   RF Profiles Change: Added "APs (like CW9166I and CW9178I) that have a flex radio that supports 5 + 6 GHz and are deployed in a regulatory domain that does not support 6 GHz the Flex radio will use 5 GHz and defaulting to Dual 5 GHz operation. The Flex radio settings will not be present in the RF profile when deployed in a regulatory domain that does not support 6 GHz. This will lock each AP and 5 GHz radio into a 5-hi and 5-lo mode of operation where only specific UNII bands and channels are allowed per radio."; added section "802.11ax".     Cameras: Meraki Vision Portal Changelog Change: Added release notes for up to v1.26.4.     Platform Management: Meraki Hardware and Software Onboarding Guide Change: Added section "How to Locate the Order Claim Key".   LLDP Support on Cisco Meraki Products Change: Added "Note that, while it's possible for multiple CDP or LLDP enabled devices to be connected to a single switch port, only a single CDP or LLDP entry is supported for display on the client info for a switchport, both in the Dashboard UI or via the API."   Organization Settings Change: Added "If two-factor authentication is enabled, users will need to contact support to assist in disabling 2FA." ... View more

  New articles: Overview and FAQ: Cisco Meraki SMS MFA Deprecation Change: New article.   FAQ: USB Modem Deprecation of Support Change: New article.     Security & SD-WAN: Threat Protection Change: Added "MX64 and MX65 devices on firmware releases prior to MX 18.1.7.13, and all other MX devices on firmware prior to MX 17.6 run versions of Snort 2 that will stop receiving updates after December 18, 2025. To ensure that such devices continue to receive updated rule sets, please ensure they have been upgraded to MX 18.1.7.13 or any higher major revision before then. In addition, any devices that reached their End of Support dates prior to Dec 18, 2025 will no longer receive further ruleset updates after this date. For more information, please refer to this Snort blog post."   Using Site-to-site VPN Translation Change: Added "1:Many VPN NAT cannot be configured for the AnyConnect Client VPN subnet."   MX Sizing Guide & Principles Change: Added "Maximum Routes".     Switching: Cloud Configuration: Release Versions and Highlights Change: Added "Firmware Upgrade Advisory for C9300L: Due to a known issue, 9300L switches will not upgrade when a network upgrades to IOS XE 17.15.4. If your network is scheduled for an upgrade from a CS firmware version to IOS XE 17.15.4 version, all other devices will upgrade as planned and C9300L models will remain on the current CS firmware version.  This measure is in place to prevent an issue where 9300L may experience a problem upgrading to 17.15.4, attempt to roll back to the original software image, and then fail to properly boot. Once this issue has been patched, the switches will upgraded normally."   Switch Ports Change: Added "This is NOT a supported configuration. For LAG to work properly, both devices should be configured to use LACP negotiation.".   Multicast Overview, Configurations, and Best Practices Change: Added "MS (and Dashboard-managed CS) switches do not currently support Fast Leave on IGMPv2."     Wireless: OpenRoaming integration with Cisco Spaces Change: Added section "Frequently Asked Questions".   CW9172I Installation Guide Change: Updated power consumption: "25.5W (802.3at required) for full operation of AP." and "The CW9172I needs 802.3at, (up to 30W from the switch, or 25.5W at the AP) for full operation of AP."     Cameras: Meraki Vision Portal Changelog Change: Added release notes for up to v1.26.0.     General Administration: Meraki End-of-Life (EOL) Products and Dates Change: Added "MV Gen 2 Cameras".   Organization Settings Change: Added "When an OAuth 2.0 integration is explicitly authorized, it operates independently of the login IP range restrictions. This means that applications using OAuth 2.0 tokens can access permitted resources from any IP address, regardless of the IP range controls you have configured for standard logins or API key usage. OAuth 2.0 integrations can be revoked at any time through the integrations page: Organization > Integrations > My Integrations."   AI Assistant for Networking Product Updates Change: Added "Sep 22, 2025" updates.   Cisco Meraki Canada Region Change: Updated feature availability: "Per-Device and Subscription Licensing, and Cloud Management for Cloud/Device Config/Hybrid Operating modes are currently not supported in the Meraki Canada Region."   Subscription - Licensing SKUs Change: Added LIC-MT-E. ... View more

New articles: Pre-download with Local Firmware Fetch Change: New article.   Meraki Authentication Server Certificate Rotation - July 2025 Change: New article.   Assa Abloy Door Lock Integration with MRs Change: New article.   Client360 - Cloud Change: New article.   Table Summarization - Public Beta Change: New article.   AI Assistant for Networking Product Updates Change: New article.     Security & SD-WAN: Content Filtering Change: Added sections "Using the Catch-All Wildcard (*) in URLs" and "Patterns for Blocking or Allow Listing Specific URLs".   NAT Exceptions with Manual Inbound Firewall on MX Security Appliances Change: Added "The inbound firewall also affects services such as Client VPN (AnyConnect or IPSec) and rules must be configured towards the MX's uplink IP (or virtual IP, if in a warm-spare configuration using one) in order for those connections to be allowed."     Switching: FAQs: Migrate to Meraki management mode Change: Added "Please note, when migrating cloud born (-M) models, such as C9300-M, to CLI/DNA management, the Switch must have a valid Meraki license and a Purchase Order for a 3Y or greater DNA license must be opened. If SmartNet support contract is desired after migrating -M to CLI/DNA management, please open a support case to request a PID change."     Wireless: Cloud-Managed Hybrid Operating Mode for Catalyst Wireless LAN Controllers - What's New Change: Added CW9800H1, CW9800H2 and CW9800M and Cisco Wireless 9178I, Cisco Wireless 9176I/D1 and Cisco Wireless 9172I/H.   Cloud-Managed Hybrid Operating Mode for Catalyst Wireless LAN Controllers Design Guide Cloud-Managed Hybrid Operating Mode for Catalyst Wireless LAN Controllers FAQ Cloud-Managed Hybrid Operating Mode for Wireless Controllers LAN Controllers Requirements Change: Added CW9800H1, CW9800H2 and CW9800M.   Extending the LAN with a Wireless Mesh Link Mesh Deployment Guide Change: Added "Multicast protocols, including CDP, LLDP, VTP, etc., are not supported over a wireless mesh link."   Adding Catalyst 9800 Wireless Controller and Access Points to Dashboard Change: Added "If your organization is using per-device licensing you must use the Network-wide > Configure > Add Devices page to add IOS XE devices to an existing network."   Auto RF: Wi-Fi Channel and Power Management Change: Added section "6 GHz Channel Selection"; added section "AFC".   AI-RRM Change: Added "AI-RRM provides the best performance in the 6 GHz band, including dynamic channel width up to 320 MHz, and AFC SP (Standard Power) Transmit Power Control with extended power budget. In 5 GHz, AI-RRM can support channel width up to 160 MHz where the device is capable."     Cameras: Meraki Vision Portal Changelog Change: Added release notes for up to v1.25.3.   MV Smart Camera FAQ Change: Added "How do I opt in to Intelligence Training?"; added "How do I opt out to Intelligence Training?"; added "What is changing about Camera Intelligence Training?".     General Administration: Meraki End-of-Life (EOL) Products and Dates Change: Added "MS350-24-HW" and "MS350-48LP-HW".   Information for Cisco Meraki for Government users Change: Added "Campus Gateway" to the list of unsupported devices.   AI Assistant for Networking - Public Beta Change: Added "Cisco handles your data responsibly. See the Privacy Data Sheet."   ... View more