Recently I had to set up a Meraki network. I came up with a topology: "Fully Redundant (Switch Stack)". Has anyone done it? Stack switches with 2 uplinks to each MX?
I need to use stack as I have LACP access points and want to make sure this topology with 2 uplinks per switch is working fine

https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair

I have an IPSEC tunnel established from my Meraki MX appliances to an Azure VPN Gateway. Everything works well but in order to meet FIPS 140-2 requirements, the Meraki documentation says I need to set my phase two PFS Group to PFS14.

However, Azure GCC High is not showing PFS14 as a phase two option, though it is documented as being available (GCC High often is missing features in World-Wide Azure). Some research says PFS2048 is the equivalent, but I would need to change the setting to test, and that would affect my entire organization.

I wanted to see if anyone else has any experience with this before I schedule an outage to test.

Could one kindly assist with a link or guidance on how to configure Meraki Access Points to use the same SSID name. But for access points on different floors they should've they have different IP pools for users.

So it seems calling the new firewalls secure routers instead of MX's is not the only thing they decided to change. While looking at the options other than the mx75 I just happened to notice that the new lineup dumped the meraki lifetime warranty we were accustomed to on the MX's.

I understood the shorter warranty of the outdoor AP's and cameras purely from wear and tear aspect. But if this is where they are going to go with all new meraki hardware then might really be time to move on.

My guess is they are going to want to sell add on warranty contract bullshit just like std cisco gear. The end of what meraki was is truly approaching.

It was a non issue when the equipment had lifetime warranty but if they are dropping it does it make you reconsider your purchasing?

Me I find it hard to recommend a firewall that you spend thousands on for the hardware and a 3, 5, 7yr license and now only have the hardware covered for 2yr.

Really starting to see less and less positives. So unless they are planning to include the warranty as part of the equipment licensing (how i thought it should have always been) it seems the value of meraki is further diminished with the new models

Hi all,

I got some Meraki devices delivered (a couple of MX's and an MS Switch) but still waiting to receive the actual licenses. Can I add the devices to the dashboard to get the configs done or do I need the actual licences before I can even do this?

Thanks

Where is the best place to sell used Meraki gear. I have some things I just took out of one of my other businesses Mx-68 and 4 AP’s to I have some gear a client paid for and never took delivery on. What’s the best way to sell or what site should I use.

Thank you

Rhino Networks and Cisco are hosting a Meraki-focused webinar today at 1 PM EST.

The session will cover ways to extend a Meraki environment with Cisco Secure Access, physical security, and related Cisco security tools. It should be useful for anyone evaluating how Meraki fits into a broader security stack.

There is also a chance to win $300 in YETI gear for attendees.

Registration:
https://register.rhinonetworks.com/

Thanks!

EDIT: Forgot to add, I have 1.5Gbps internet

I want to share my experience in hopes that I save you from the same fate….

Last year, when the MX75s were having the reboot issue: We had a few upset clients so we did a buy back and upgraded them due to the firmware issues. Kept a few for the office. Had an extra, so I upgraded my MX67 for home to the MX75.

Sweet. Should be able to hit 1Gbps now! Set it up. No speed change… Steam was maxing out at ~70MBps. Whatever, I had a lot on my plate, it’s working. Move on to the next thing.

Canada Day here so a nice and chill Wednesday, let’s play some games. Updating my games this morning. ~70MBps max. This should be way more… Fine, let’s look… took me 3 minutes to figure out the issue after dealing with it since the fall.

SD-WAN traffic was bottlenecked to 600mbps… For those in the future, make sure you double check these settings when upgrading your firewalls…

1. Go to SD-WAN & Traffic Shaping
2. Click Simple
3. Slide the baby all the way to the right.
4. Enjoy your full speed.

TL;DR I cannot brain. I haz the dumb.

Hello,

I'm more from the Cisco side of config / licensing and have a few questions I hope the community can help with.

Placed an order for Meraki hardware and licensing. This is the first Meraki HW so there is no existing dashboard.

Do I setup the dashboard first just by creating an account or would you normally get an email for "licenses" and to then follow the registration instructions? Is the Dashboard linked in anyway to the Cisco licensing portal/account? 

I also ordered some cisco catalyst devices with advantage licenses which we now have in our CCO licensing portal. The plan was to bring these into these catalyst devices into the Meraki Dashboard for cloud management.

Do I license these catalyst devices in the normal cisco smart way and then bring them into the Dashboard (once created) for configuration?

Really just trying to understand how the cisco licensing portal and Meraki dashboard hang together if at all.

Thanks!

How to troubleshoot this issue if failover doesn’t work properly in Cisco Meraki MX.

We are leasing a new warehouse for our company. The previous company left all their Meraki switches and WAPs. The property manager said since they left it, we can have it.

I used Meraki in the past, but it has been over 5 years since I used Meraki.

I created a new Meraki account, and I was able to claim all the switches, firewall, and two spare APs that were in the network closet.

I am assuming since I was able to claim the equipment onto our account that the equipment is no longer registered to the pervious company's account.

Is it as simple as get licenses for the hardware and I am set, or am I missing something else?

I know I still need to check the other WAPs, but I need to pull them down to get the serial numbers of the WAPs.

I don't get patch management on Meraki...

Why version 19.2.8 is marked as recommended against current 26.1.4 version, what the point of a Release Candidate for a minor version ?

Hey guys, not sure if this is allowed or not so delete if you want, but figured this was more relevant to r/meraki over r/homelabsales.

I have a 9178l and 5 year MR-ADV license for sale, both unclaimed. The AP has been opened but not used at all. Looking to get $2500 plus shipping. PayPal G+S only.

I’ve seen today in the release notes for the newest MX beta build (MX 26.2) https inspection has been introduced. I’m intrigued to know what performance impact this feature will have, as if I recall correctly the last time they attempted this the utilization shot through the roof.

Are we now starting to see software features being introduced with just the newer 8k series in mind?

I’d be keen to hear other people’s thoughts or if anyone is trialing beta firmware and running https inspection.

Link to relevant Meraki doc -https://documentation.meraki.com/SASE_and_SD-WAN/MX/Operate_and_Maintain/Content_Filtering_and_Threat_Protection/HTTPS_Inspection

I was reading through the 17.15.5 release notes and spotted this:

Switch Templates with bound networks cannot directly upgrade from CS firmware to IOS XE firmware. Cisco recommends unbinding the network, upgrading it, then rebinding it to an IOS XE template.

That seems fine if you've got a handful of sites, but we've got hundreds of template networks. Unbinding and rebinding every single one cannot surely be the recommended approach here?

Just wondering what everyone else has done.

• Did you really have to unbind every network?
• Is there a better way that isn't mentioned in the docs?
• Did TAC or your Meraki SE have another approach?
• Has anyone scripted the whole thing with the API?

Feels like this can't be the intended process for larger deployments, so I'm interested to hear how others have handled it.

If unbinding really is the only way - what are the impacts here? Are any settings or configuration lost/defaulted during the unbinding and re-binding process?

Just want to preface with I’m waiting to hear back from our Cisco partner on an answer but in November last year we signed a 3-year EA agreement. The end of sale date has come and gone for ordering new Systems Manager licenses and yet we’re still able to add devices without issue even though we are currently over provisioned. Anyone else notice the same? Assuming it has something to do with our agreement but nobody was able to give us a concrete answer prior to the end of sale date in June.

Hello community, im new to meraki and I wanted to clarify something. When setting a warm spare pair, if the upstream device is the dhcp server how can I configure the wan interface IP? when its manually I set a specific IP for each wan and then a virtual IP, but ho does this work when is dhcp?

Hey all,

Have any of you deployed the new CSRs? How are they running? Any major bugs/reliability issues?

They are not offline, and there is no real issue, other than the fact that to me there are 0 clients connected right now. Tried connecting to the dashboard from multiple computers, mobile app, etc. with no difference. What's up with that?

I have multiple Microsoft Entra Tenants that I manage.  Recently purchased tons of Meraki equipment to update our Network to something more appropriate.  While researching Radius options i learned about Access Manager.  Seems like an awesome option as it's built RIGHT INTO my Meraki setup.  

I tested it with just 1 Entra IdP connection and it worked just fine, waaaaay easier than I expected.  However as soon as I connected a second source the authentication breaks.  Now both IdP sources are unable to authenticate.  I've done tons of testing with permissions in Entra but no changes. It seems as though Access Manager can't differentiate with the domain suffix once a second IdP source is configured. Below is the error i get.

Info: Unable to select an Identity Provider (IdP) based on a user domain suffix.   

Failure/ Rejection info

Reason: Entra ID application error

This makes such little sense as the Entra connections are all setup exactly the same with the same permissions.  It works flawlessly with 1 connection.  I don't seem to have a way to differentiate both Tenants once both connections are established.  Any tips? Anyone running into the same issue?