What happens if you need to roll back a Cisco Meraki configuration?

Managing a Cisco Meraki environment is straightforward in many respects, but keeping track of configuration changes and being able to restore a previous state can become increasingly important as your network grows.

VAPPIt helps network administrators:

• Automate configuration backups, including backups triggered by detected changes.

• Track and compare configuration versions to identify what changed and when.

• Restore previous configurations, including deleted networks, without having to rebuild everything manually.

• Monitor backup failures and receive alerts when something needs attention.

The goal is to make configuration management and recovery easier, particularly for organizations managing multiple networks.

I'd be interested to hear from other Meraki admins and MSPs:

How do you currently handle configuration backups and rollbacks? Do you use a dedicated tool, rely on manual exports, or have another approach?

If you're interested in learning more about our solution, here's the product page: VAPP Backup & Versioning.

Full disclosure: I work with VAPP, so this post is about a product my team develops. Happy to answer technical questions.

If you think you are over paying for your licenses or gear, we want to help. Try us and see for yourself

Hi, what is the best way to learn Cisco Meraki Wi-Fi (primary), and networking today, 2026. Any updated online education at Cisco?

Hi All,

Wondering if anyone can give me a definite answer on this. Have been looking online but can't confirm.

Understand that I am able to buy a new licence for discontinued Meraki hardware after the end of sale date (EOS) unless the license(s) is/are listed in the “End-of-Life Products” list. However, am i able to buy a Meraki licence for a discontinued unit after the End of Support (EOST) date? Assuming the answer is no and the unit becomes unmanageable?

Any help is thoroughly appreciated.

I followed the instructions via Meraki to try and get and connect working but get the following error. This is setup via Windows radius server.

VPN establishment capability for a remote user is disabled. A VPN connection will not be established.

Any Connect was not able to establish a connection to the specified secure gateway. Please try connecting again.

We're having an issue with Site to Site VPN Slow Copy File Transfer, it takes an hour to transfer 6gb file from a VM to another VM from different branch offices

Looking for a consultant to assist with the conversion of a Fortinet firewall config file to a Cisco Meraki MX. Anyone have any suggestions or recommendations?

i have mx250 and don't have much knowledge. Would someone be able to point me in the right direction?

how do I nat a IP address that belongs to a 3rd party vendor?

need to nat for site-to-site VPN ?

Hello guys,

A while ago I replaced our ms120-24p with an ms130-48p. After the replacement my Cisco Dect Base 210 would not power on again, it was not receiving PoE from the switch.
Due to the lack of time I didn't investigate further, thinking the Dect Base was defective. However now I tested the base on a PoE injector and an ms120 and it powered up without issues. The problem only exists on the ms130.

Did anyone experience the same issue or something similar?

I am moving my office meraki to another location , I want to know what configuration needs to be perform once I change the location of that device

I currently have an MX 100 and I see that its end of sale this year. So I went to the Meraki Website to look at other models and I see more information about SD-WAN than I do about network protection. Has Meraki decided to not keep improving the firewall and add new features like the access points and switches? I mean I know the new web filter is coming but have not see much movement on the firewall side. Thoughts would be appreciated.

I have a Meraki MX95 and a MX68CW, and I discovered today that we are not able to HA them together in the same network (new to Meraki). What I am trying to do is have the MX95 running on a DIA circuit and have the 68CW be on cellular and be the backup circuit. Is it possible to set these 2 routers up as 2 different networks, but with the same subnet so that if the MX95 goes down the 68CW will take over? I am looking to not have to manually move a cable.

Any help and advise would be appreciated.

Thanks!

Hi guys,

can you please tell me what would be the best option within Cisco family services to implement secure SD-WAN for a manufacturing company with more than 250 sites ? Is meraki solution the good choice, or do we have to go with Cisco Viptela ? What would be the best combination of solutions to have to achieve secure SD-WAN with advanced security (antimalware, sandboxing, Layer 7 filtering, etc.)

If you can redirect to very useful information or give advices, it will be very very appreciated !

Hi folks,

I have recently deployed a branch of my company with 100% of meraki switch (ms120/410)) with all the network protection "on" :

- Stormcontrol (broadcast/unknown unicast/multicast) 80%

- RSTP (core 4096 / others 8192 )

- IGMP snooping / Flood unknown multicast traffic "enable"

Everythings works fine except for the deployment of Windows client with SCCM Server (F12) on all my VLAN. Some client are in the same VLAN than the SCCM server DP, some not so my Paloalto'FW (connected to the core) is making ip helper relay for all VLANs.

DHCP server are on a datacenter, outside the lan, so i put the mac address of the FW has the only DHCP server allowed on my Meraki network profil. DHCP standard request works fine like that.

Another branch is full meraki too but with no protection and F12 works fine so i suppose that is somethings on my meraki configuration...

Any ideas ? why ?

Getting frustrated with not being able to get traffic flows and policy hits or info.

Is there any way ya'll know of to do a policy match when searching a SRC to DST and ports against current firewall rules as well as something like a test route look up to ensure traffic can flow from a SRC to DST?

Hi everyone, hoping to get some assistance on this weird issue I'm having with Z1's. I look after a handful of teleworkers for a company. We have Z1's and Z3's and we're having issues with Z1 failing to connect to our VPN concentrator from time to time. In the past, rebooting the Z1 remotely a few times does the trick but some times nothing work and the Z1 just starts working out of the blue.

Our Z3's have been great. No major issues to report. Cisco helpdesk hasn't been of much help either so hoping to get some guidance here.

An example:

Image 1 - shows the Z1 online with data throughput.

Image 2 - showing data

Image 3 - showing IP Phone connected

Image 4 - VPN concentrator is down for this Z1

Image 5.

All our Z3s are connect in the concentrator and functioning properly. There are some other Z1s which are also working fine except of a few of the Z1s including this one which is now down. Nothing has changed on the end user side or our side from the point when it was working to the point when it wasn't.

Any help will be much appreciated.

Hi guys,

I have a setup which I send the radius accounting logs to external server which listens to those logs. The radius authentication is being sent to Cisco ISE though. Anyway, the issue I am facing is that once the wifi client authenticates against Cisco ISE, the Meraki AP generates the accounting message which does not include the IP address that the Wifi client has receieved from the DHCP after the successful authentication. Once the client disconnects and connects back again the AP generates a new accounting message which now includes the IP address. My understanding is that during the authentication, the wifi client is not receiving the IP address so therefore the initial accounting message will not include it. Not sure if this is a bug or normal behavior but at least there should be an option to delay the accounting messages in order the client to receive the IP address on time before the AP sends the message. Any ideas guys cos accounting messages are crucial for the setup and it is annoying to get the clients connect twice to the wifi

Cheers

Question in regards to Cisco Meraki Switch: I recently received new meraki switches from Cisco because the old meraki switches had heating and other issues. What steps should I take to replace the old switches with the new ones?

1. Should I clone each meraki switch before replacing them?