I have two MX 250's, one is set up as the Primary and the other is set up as the Spare.   They connect to two switch stacks.     One switch stack is connected on a 1Gbps line to the Primary, with another 1Gbps line to the Spare MX.  Both with RSTP enabled and forwarding.   The second switch stack is connected to the primary on a 10Gbps fiber line with RSTP enabled and is forwarding.   When I connect the the Spare MX to a 10Gbps fiber line, to the second switch stack with RSTP enabled, the network crashes and the event log reads mac flapping.     I set the Spare MX 10Gbps fiber line to STP guard > Loop guard.  The network did not crash but, the port turned amber in the Meraki dashboard and had a "high rate of STP topology changes" note.   The goal is to have the Spare MX connected to both switch stacks and the network to stay up if the Primary MX fails and rolls over to the Spare MX.   Are my MX's setup correctly?  If the Primary MX fails will it be seamless roll over to the Spare MX?  ... View more

We set up Client VPN, Anyconnect to use SAML authentication.  Users are can successfully logon using Anyconnect with SAML authentication on a Windows computer.   When a user attempts on a MAC the AnyConnect Login window pops up with the error that the authentication cancelled.     2023-06-08 10:10:52.521931-0700 0x2fcc98   Default     0x0                  40242  0    Cisco Secure Client: (libvpncommon.dylib) [com.cisco.secureclient.vpn:csc_ui] Message type prompt sent to the user: Please complete the authentication process in the AnyConnect Login window. 2023-06-08 10:13:26.837899-0700 0x2fcc98   Default     0x0                  40242  0    Cisco Secure Client: (libvpncommon.dylib) [com.cisco.secureclient.vpn:csc_ui] Function: run File: ../../vpn/Api/ConnectMgr.cpp Line: 1048 Authentication cancelled.   Packet capture logs show that the MAC hits the MX and is not routed to the iDP. Using latest version of Anyconnect, also tried with previous version.   Works on iOS.     ... View more