We had the same NO-PROPOSAL-CHOSEN error on the remote side of the Site to Site VPN.   We have found that with Load Balancing enabled and Active-Active AutoVPN set to Enabled, the Non-Meraki VPN peers can still only be established on whatever interface is set as the Primary uplink on the SD-WAN & Traffic shaping page.   We resolved the NO-PROPOSAL-CHOSEN error by using the correct Public IP of the MX on the remote side of the tunnel.   ... View more

Funny thing, that this stil persists across all the switching SW trails .. ... View more

I've been hit with this today and use a password manager.   Turns out that the only way to avoid complete lockout from Meraki is to always set up two separate accounts in your own name. ... View more

what is the behavior of the meraki AP when connect to a non dhcp enabled network and static ip assigned to it   ... View more

Layer 7 rules are Deny only because....   I have no reason why except to say lunacy.  They apply top down so i expect something like... 1 Accept P2P Skype 2 Deny P2P All This would allow Layer 7 rules to allow Skype and block all other P2P traffic like file sharing networks but for as much money as Meraki costs they apparently just like to have the benefit of touting that they HAVE Layer 7 features but not actually making them useful whatsoever.  Layer 7 isn't really available in this product as far as I can tell because all you can do is block individually so it's pretty much useless... unless you just want to block one thing then, whatever floats your boat.  For all the press Meraki gets about having amazing security I don't see one iota of security in this thing.  I feel like my network is wide open to attacks.  I mean, yeah! There's a SPI firewall.  Whoop-dee-doo. ... View more

Looks like it will happen 🙂 Products - Cloud Management for Catalyst FAQ - Cisco ... View more

Yes redirections of NTP requests are possibles as you say but only for clients. Meraki's devices are forced to resolve NTP requests with pool.ntp.org https://documentation.meraki.com/General_Administration/Other_Topics/Upstream_Firewall_Rules_for_Cloud_Connectivity ... View more

I'm sorry to reply to such an old topic, we've had this issue in the past at a site, but we just got a customer who has new Optimum (formerly suddenlink) coax service in Texas and I'm seeing this issue. The optimum tech I talked to is definitely aware of something. He asked about my firmware version (18.107.10 on an MX100) The MX arps for the gateway and gets no response. If @Nash ever became aware of a fix or anyone else who might read it, would love to hear. My Optimum ticket has been escalated to engineering. ... View more

It should be a cable problem. I have encountered a similar problem. One of the APs was in repeater mode. Either the cable b/n the AP and the Switch is long or the cable has a problem.  When I checked it was connected to another AP wirelessly and the cable was not working. Once the cable problem was resolved it changed to Gateway mode.  ... View more

Charge the Port in your SW from open to Mac allow list. In my case i had issues with a legacy printer and i had the exact same issue. changing the port access policy solved the issue for me. ... View more

Only on the WAN interface. ... View more

Hi @AnshumanKumar , at this moment all Meraki-led ECMS2 sessions have been paused, but we still have some options with Learning Partners or eLearning: https://community.meraki.com/t5/ECMS2/ct-p/ecms2   Thanks ... View more

This would be good to know for sure. Transferring passwords as cleartext will be too insecure IMO.  ... View more

I see that the documentation for this has been updated (Last updatedApr 13, 2023). Now it does not mention any special , ehhh, "conditions" for different models. Will it now work, across all switches regardless of port density ? - do anyone know ?   ... View more

You can find it here: v1-beta - Meraki Portal What's New & Changelog - Cisco Meraki Developer Hub and search for "wake" ... View more

Did anyone ever get a Cisco AP in WGB mode to connect (and forward traffic) to the equipment behind it ?   ... View more

great ... View more

Hello all   Enabling "Routing and Remote Access service" on each laptop fixed the problem for me. I moved from 310Kb/s to 50Mb/s just by activating the service. Other solution which look to work: - Installing WireShark - Installing Cisco AnyConnect (without using it)   No time to try but i suspect those software to activate other Windows 11 services such as "Routing and Remote Access service"   ... View more

Hi Carlo try this!!   Get Organization Login Security ... View more

Hi Nash, I have the same scenario and am using the MX85, with Azure AD auth via SAML and the Cisco AnyConnect client. My need is to only allow one user access to a specific IP on the lan through VPN while the other users are not impacted by the restrictions. My systems are up to date, and I wanted to see if the technology has advanced since this post to allow these types of configurations. ... View more

Meraki also uses a public IP in the NAS field when AP's and Switches probes the radius server to see if it is alive. Meraki also uses public IPs for BGP router ID's when enabling BGP and for the APs when they are in mesh.   It's really strange to see these public IPs show up at seemingly random places. ... View more

Just had to fight with a similar problem. Turns out that if the local network on the remote side has the same structure as your local network (both local IP adresses are in 192.168.0.0/24 networks for example) then you can't complete the connection. So I had to set up a redirect for the clients IP. Client enters a madeup IP  address in the RDP client and it redirects him to the remote PC. ... View more

ANyone ever get a solution for this??? ... View more

Which logs did you look at?  We are experiencing the same issue and have disabled P2P on Layer 7 and are still having the issue.   ... View more

was this issue solved we seem to have a similar issue? thanks ... View more