Cisco Meraki MS120-48LP switch amber light blinking offline
Verified Replacement Hardware & Test Gear
Click any component image or button to verify current Amazon stock
Long-Life Camera Cells
Energizer Ultimate Lithium AA Batteries (for Blink Outdoor) / CR2032
OEM Required 1.5V Lithium Spec
Sync Module Local Storage
SanDisk High Endurance 128GB Video Monitoring Storage Media
High-Endurance Video Flash
Exterior 2.4GHz RF Boost
TP-Link RE500X Wi-Fi 6 Outdoor Range Extender
Eliminates Red-Light Signal Drops
MS120-48LP Hardware Diagnostic Matrix
| Symptom / LED or Log Code | Root Hardware Cause | Verification Command or Test | Confirmed Fix |
|---|---|---|---|
| Blinking Amber (1 Hz) | DHCP Failure / No IP Assignment | Check Upstream DHCP Pool / Local Status Page | Assign Static IP or Fix DHCP Scope Check Long-Life Camera Cells on Amazon ↗ |
| Blinking Amber (Fast/Irregular) | Cloud Communication Blocked | Test Port 7351 via Telnet/Curl | Update Firewall Outbound Rules Check Sync Module Local Storage on Amazon ↗ |
| Solid Amber (No Blinking) | Boot Loader Failure or Hardware Fault | Power Cycle / Cold Boot Test | Initiate Cisco RMA Process Check Exterior 2.4GHz RF Boost on Amazon ↗ |
| Uplink LED Off (Ports 49-52) | SFP Transceiver or Cable Fault | Swap with known good SFP / Cat6A patch cable | Replace SFP Transceiver or DAC Cable |
Initial Physical Layer and SFP Troubleshooting
The Cisco Meraki MS120-48LP is a Layer 2 access switch frequently deployed in branch offices. When the status LED blinks amber, the hardware is functionally operational but logically isolated. Start by inspecting the physical uplink. The MS120-48LP features four 1G SFP ports (ports 49 through 52). If you are using a copper SFP or a fiber transceiver, ensure the RX/TX levels are within acceptable thresholds. Fiber optic signal strength should ideally fall between -3 dBm and -9 dBm. If the signal is lower than -15 dBm, the link may flap, causing the switch to drop its cloud heartbeat.
Inspect the Cat6A patch cable connecting the switch to the gateway. A common point of failure in older racks is a bent pin in the RJ45 port or a degraded termination in the patch panel. Using a high-quality cable tester can rule out cross-talk or continuity issues. If the switch is connected to a core or distribution switch via a DAC cable (Direct Attach Copper), ensure the cable is fully seated. Unlike some MS125 models, the MS120 series is limited to 1G speeds; attempting to force a 10G SFP+ module into these slots will result in a physical link failure and a persistent amber light.
Network Layer and Management VLAN Configuration
The MS120-48LP relies on an IP address to reach the Meraki Dashboard. By default, the switch requests an IP on VLAN 1. If your management network is on a tagged VLAN (e.g., VLAN 10 or VLAN 99), the switch will fail to get an IP and blink amber. To resolve this, connect a laptop directly to one of the switch ports and navigate to setup.meraki.com (the Local Status Page). Here, you can manually define the Management VLAN and assign a static IP address, subnet mask, and default gateway.
DNS resolution is another frequent culprit. If the switch can ping the gateway but cannot resolve n123.meraki.com, it will stay offline. Ensure your DHCP server is providing valid DNS entries, such as Google DNS (8.8.8.8) or Cisco Umbrella (208.67.222.222). In environments with strict security policies, verify that the switch has a path to the internet that does not require a proxy, as Meraki switches do not support authenticated web proxies for their cloud management traffic.
Local Status Page and Diagnostic Output
While Meraki switches lack a traditional local CLI for configuration, you can pull diagnostic data from the Local Status Page or via an upstream Cisco device using LLDP/CDP. If you have access to the upstream core switch, you can verify the status of the MS120-48LP port to see if it is negotiating correctly or throwing errors. For example, checking the transceiver DOM (Digital Optical Monitoring) data can pinpoint a failing SFP module before it dies completely.
Core-Switch# show interfaces transceiver detail
Ethernet1/49
Calibration: internal
SFP Detail Diagnostics Information (showing current values)
----------------------------------------------------------------------------
Current Alarms Warnings
Measurement High Low High Low
----------------------------------------------------------------------------
Temperature 32.45 C 75.00 C -5.00 C 70.00 C 0.00 C
Voltage 3.29 V 3.63 V 2.97 V 3.46 V 3.13 V
Transmit Power -5.21 dBm -1.00 dBm -9.00 dBm -3.00 dBm -7.00 dBm
Receive Power -22.40 dBm -2.00 dBm -18.00 dBm -4.00 dBm -15.00 dBm
----------------------------------------------------------------------------
Status: Receive power low alarm detected. Check fiber patch and cleaning.
In the sample output above, the receive power is at -22.40 dBm, which is well below the -18.00 dBm threshold. This indicates a physical layer issue that would prevent the MS120-48LP from maintaining its cloud connection, resulting in the blinking amber status light. Cleaning the fiber bulkheads with a “one-click” cleaner or replacing the patch cable is the necessary fix here.
Power Supply and PoE Budget Constraints
The “LP” in MS120-48LP stands for Low Power, providing a 370W PoE budget across 48 ports. While a power budget overrun usually results in specific ports shutting down rather than the whole switch going offline, a failing internal Power Supply Unit (PSU) can cause erratic behavior. The MS120 series uses an internal 100-240V AC power supply. If the voltage on the 12V DC rail fluctuates due to a failing capacitor or poor “dirty” power from the utility, the CPU may hang, leading to a solid or blinking amber light.
Ensure the switch is plugged into a high-quality APC UPS or a similar battery backup system to filter line noise. If the switch is in a high-temperature environment (above 40C/104F), the thermal protection may trigger. Although the MS120-48LP has fans, dust accumulation can impede airflow. Use compressed air to clear the side vents. If the status light stays amber even after a cold boot with no PoE devices plugged in, the internal power rail is likely failing, and the unit requires replacement.
Firewall Rules and Port Requirements
For the MS120-48LP to “check in” and turn green, the following outbound ports must be open on your edge firewall (e.g., Cisco Firepower or Meraki MX). If these are blocked, the switch will remain in a blinking amber state indefinitely. Note that Meraki uses a range of IP addresses for their dashboard; it is best to whitelist the Meraki cloud by domain if your firewall supports it.
- TCP Port 443: HTTPS for dashboard communication and firmware downloads.
- UDP Port 7351: The specific “tunnel” port used for cloud management heartbeats.
- UDP Port 123: NTP (Network Time Protocol) to ensure the switch has the correct time for certificate validation.
If you have recently updated your firewall’s IPS (Intrusion Prevention System) or changed a Geo-IP blocking rule, the switch might be caught in the filter. Check your firewall logs for any dropped packets originating from the MS120’s MAC address or assigned IP.
Performing a Factory Reset
If all logical and physical troubleshooting fails, a factory reset is the final step before RMA. Locate the “Restore” pinhole button on the front panel. Using a paperclip, press and hold the button for 10 to 15 seconds while the unit is powered on. The LEDs will flash, and the switch will clear its local configuration, including any static IPs or VLAN settings. It will then attempt to reboot and pull a fresh DHCP address from the native VLAN. This is particularly useful if the switch was previously configured for a different site with a static management IP that is no longer valid on the current segment.
Frequently Asked Questions
What is the difference between slow blinking and fast blinking amber on the MS120?
A slow blinking amber light (once per second) typically indicates the switch is waiting for a DHCP response or cannot find a route to the internet. A fast, erratic blinking amber light often suggests the switch has an IP but is being blocked by a firewall or is experiencing a DNS resolution error.
Can I use 10G SFP+ modules in the MS120-48LP uplink ports?
No. The MS120-48LP only supports 1G SFP transceivers in ports 49-52. Inserting a 10G SFP+ module or a 10G DAC cable will not work and the link will remain down. Always use standard 1G SFP modules or 1G-compatible copper transceivers for this specific hardware model.
How do I access the MS120 local status page if it is offline?
Connect a laptop to any switch port and set your laptop to obtain an IP automatically. Once connected, navigate to http://setup.meraki.com or 192.168.1.1 in a browser. This allows you to configure static IP settings, management VLANs, and view basic diagnostic logs even without an internet connection.