My Co-terminal License will get expired coming Aug 31. Kindly give direction for below scenario
Please confirm the following scenarios:
Meraki Firewall in front of SDWAN - When the firewall licenses reach the end of their grace period, all client traffic past the firewall will be blocked. Users will not have internet access, and Will Be Blocked from communicating with other TPI locations, AWS and Oracle via SDWAN.
Meraki Firewall behind SDWAN - When the firewall licenses reach the end of their grace period, all client traffic past the firewall will be blocked. Users will not have internet access, and Will Not Be Blocked from communicating with other TPI locations, AWS and Oracle via SDWAN.
For the RI, IA, AZ, Santa Teresa, India, Denmark and Germany locations, how many are designed with the firewall in front of the SDWAN devices?
Solved! Go to Solution.
Basically - when your licences expire your MX's will become nothing more than a brick. They won't pass traffic - simples
Renew your licence and the magic will continue.
When your CoTerm license expire, your Meraki Organizations (and indirectly all your Meraki networks) will enter a 30-day Grace period. When that 30 day Grace Period expires, and you have not yet renewed your licenses, all Meraki networking will stop working. AP's will shut down, Switches wil no longer switch frames, and your Meraki MX will no longer route packets.
Basically, your entire Meraki network will stop working. If your topology allows that the Meraki portion will be bypassed, whatever that it, it will still work. But as soon as traffic hit a Meraki device, packets are dropped.
@krishnatpi wrote:
..For the RI, IA, AZ, Santa Teresa, India, Denmark and Germany locations, how many are designed with the firewall in front of the SDWAN devices?
Could you please elaborate on what you mean by this question?
Please confirm the following scenarios:
Meraki Firewall in front of SDWAN - When the firewall licenses reach the end of their grace period, all client traffic past the firewall will be blocked. Users will not have internet access, and Will Be Blocked from communicating with other TPI locations, AWS and Oracle via SDWAN.
Meraki Firewall behind SDWAN - When the firewall licenses reach the end of their grace period, all client traffic past the firewall will be blocked. Users will not have internet access, and Will Not Be Blocked from communicating with other TPI locations, AWS and Oracle via SDWAN.
Please update me for the above question..
Basically - when your licences expire your MX's will become nothing more than a brick. They won't pass traffic - simples
Renew your licence and the magic will continue.
Meraki Firewall in front of SDWAN - When the firewall licenses reach the end of their grace period, all client traffic past the firewall will be blocked. Users will not have internet access, and Will Be Blocked from communicating with other TPI locations, AWS and Oracle via SDWAN.
No. Assuming it is a Meraki MX handling SDWAN VPN connections, all traffic will be dropped. No access to Internet, no access to remote sites.
Meraki Firewall behind SDWAN - When the firewall licenses reach the end of their grace period, all client traffic past the firewall will be blocked. Users will not have internet access, and Will Not Be Blocked from communicating with other TPI locations, AWS and Oracle via SDWAN.
No. Assuming it is Meraki MX as One-Armed Concentrator handling SDWAN, and you have Meraki Switches, all traffic will be dropped. No access to internet, no access to remote sites.
If you do not have Meraki switches, and the MX is in One-Armed with SDWAN, all traffic destined for Remote sites via the MX will be dropped. If you do full tunnel via MX, Internet access is also blocked. If you have Local Internet Breakout, internet access is not blocked.
There is no black and white in networking; there are many different nuances...
As has been mentioned after the license expires you have a 30-day grace period to renew your license with an authorized Meraki reseller. Here is a link that provides detailed information on the access you will have after the license expires.