euc.byoip.nt.meraki.com

[ChaVyzPro]

Hi 

what is this URL ? euc.byoip.nt.meraki.com 

[PhilipDAth]

I don't know.

I think it might be used to deliver configurations to Meraki devices.

[ChaVyzPro]

23 GB of traffic download in 1 hour ... for 275 differents networks ... 

[PhilipDAth]

Raise a case with Meraki support.

I suspect you have a device that is sick, and is doing repeated firmware downloads/updates and failing.

[ChaVyzPro]

Hi Philip, 

Thanks, case already open, waiting for an uncomprensible answer from Meraki Support 😉 

euc.byoip.nt.meraki.com 23 GB in 1 hour !
2023-10-12 2153  
euw.byoip.nt.meraki.com 1 GB in 1 hour !! 

[ChaVyzPro]

[BlakeRichardson]

@ChaVyzPro   euc.byoip.nt.meraki.com resolves to an IP address that is in the 158.115.128.0/19 subnet that is noted in your dashboard as needed for Camera streaming proxy. Do you have MV cameras that are being accessed via a cloud connection rather than locally or do you have cloud archive licenses? 

[ChaVyzPro]

Hi Blake,

not at all, I haven't cameras anymore ... 

[PhilipDAth]

Maybe someone is watching cameras in another Meraki dashboard?

What IP is it going to in your network?  Then go and see what that person is doing.

[Ryan_Miles]

158.115.128.0/19 is not just for Camera Proxy. It's listed for many various services on the Firewall Info page. https://documentation.meraki.com/General_Administration/Other_Topics/Upstream_Firewall_Rules_for_Clo...

It can also be the source for inbound when SNMP is enabled.

I would expect most if not all of your Meraki devices would be communicating with that IP and others in the various ranges listed on the Firewall Info page. Did the amount of traffic to this IP or range dramatically increase as of late?

[RaphaelL]

I'm guessing it can only be camera since this is probably https 443. 

[Ryan_Miles]

Lots of Meraki services use 443 and it's the direction all devices are moving to for control/mgmt traffic vs. UDP 7351. See https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Meraki_Device_to_Clou...

[BlakeRichardson]

@Ryan_Miles thats odd for my dashboard it solely shows camera proxy.