Disable wan port

[MarcP]

Hey all,

my collegue is troubleshooting a problem, where we have on WAN1 ISP Router and WAN2 as Fallback LTE/4G Router..

He asked me if it is possible to disable wan2 so he can be sure its not the LTE router which is causing any problems... It is only ready, not active so I don´t think it will have anything todo with his problems, but I also never saw something how to disable a WAN port...

Only thing I know is to go to appliance status - Uplink and set wan2 to "disable". But to be honest, I didn´t do that so far and and it still looks exactly the same.

Is it really disabled?

Basic question I believe, shame on me, but dont know it...

[Uberseehandel]

Remove the SIM

[MarcP]

---

@Uberseehandel wrote:

Remove the SIM

---

hehe, its a retail store... staff on site is old, non technical and the router is in about 2 meters above her... 😄

[jdsilva]

Yeh that disable toggle is new. It doesn't actually shut the port down... It's more of like adding an ACL that stops all traffic except the Cloud connection traffic. It should be able to be used to force an MX over to cell.

There's been a few bugs with it though.

[SoCalRacer]

The way I trust the best to shut down a WAN port is via the local status page.

• MX - http://mx.meraki.com , http://wired.meraki.com  or use the LAN IP

https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Using_the_Cisco_M...

If you have access that is your best bet. If needed remote into a device on the network and then get access from there.

[MarcP]

---

@SoCalRacer wrote:

The way I trust the best to shut down a WAN port is via the local status page.

• MX - http://mx.meraki.com , http://wired.meraki.com  or use the LAN IP

---

I can use the LAN IP from my computer, but I can´t set it to disable...

Within the "configure" tab I can only do Uplink settings, not disableing, too.

Same situation, when I connect to a device on site and opening the local status page from there.

[MarcP]

@kYutobi @SoCalRacer @jdsilva @Uberseehandel 

Anyone any idea? O_o

[Uberseehandel]

On the Z3C, I can explicitly disable the LTE modem.

[MarcP]

@Uberseehandel Its not on MX65 :S I can select disable, but it is not disbling, as it keeps saying "Ready" and shown green within the Appliance status page.

@SoCalRacer as written, same "problem" on ethernet

[SLR]

is someone on site able to plug a laptop into the MX and then initiate a teamviewer session? You may be able to physically do it from the MX. not 100% sure but it is worth a try. 

[MarcP]

---

@SLR wrote:

is someone on site able to plug a laptop into the MX and then initiate a teamviewer session? You may be able to physically do it from the MX. not 100% sure but it is worth a try. 

---

I was remotely connected to a computer on site. I had the exact same "problem" from there.

[Uberseehandel]

---

@MarcP wrote:

@Uberseehandel Its not on MX65 :S I can select disable, but it is not disabling, as it keeps saying "Ready" and shown green within the Appliance status page.

---

I checked, it happens immediately on the Z3C. If Meraki have got it right with one machine . . . .

[jdsilva]

I've never been able to disable WAN ports from the local status page. They've always been greyed out for me. I was referring to the new feature on the Uplink tab of the status page for the MX.

[SoCalRacer]

2 possibilities, would be that you need to disable it in the dashboard first then from the local status page or the port has to be unplugged to be disabled.

[MarcP]

@SoCalRacer Right now i would say its only possible to unplug the cable... 

Lets see:

@Raj66 As you are meraki staff, do you know if it is possible to disable a WAN Port?

[jdsilva]

Oh shoot. You're trying to disable WAN 2? There's a bug in the new disable feature (the one on the uplink page) that doesn't work on WAN 2. It only works on WAN 1.

[MarcP]

@jdsilva Really? 😄 😄 😄 haha that would explain everything 😄

[jdsilva]

Yeh looking back at my notes and some emails it seems like it was related to models that have the dual WAN/LAN port. Those devices may not hav ea working "disable' toggle. Other models with dedicated WAN 2 ports should be fine. 

[SoCalRacer]

I believe this is a MX65 which should have 2 dedicated WAN ports. 

@jdsilva is there any doc or release on this bug? I have been able to do this before on devices. I was thinking maybe it is related to the local status vulnerability.

[MarcP]

---

@SoCalRacer wrote:

I believe this is a MX65 which should have 2 dedicated WAN ports. 

---

@jdsilva 

Yes, it has two dedicated WAN ports, Internet 1 (cable) and internet 2 (LTE)

[jdsilva]

Haha shows what I know! I've never actually used an MX65... I assumed it was the same as a 64 in that regard. Sorry guys, my bad. The info I have shouldn't apply to the 65.... Shouldn't....

Nothing published that I know of @SoCalRacer. My info comes from conversations with my account team. 

[Raj66]

@MarcP You should be able to disable that interface. Can you please open a support ticket so that we can investigate further and see what is happening?

Cheers!

Raj

[MarcP · Accepted solution]

So got a answer from the Support team:

Support:

From Dashboard you will only be allowed to disable one WAN uplink at the time. If you disable WAN2 you will not have the option to disable WAN1 as well but if WAN 2 is enabled you will have the option to disable WAN1. If you disable WAN2 in Dashboard and disconnect the WAN1 cable from your MX you will that the device will completely lose Dashboard connectivity because the WAN 2 is disabled. The ready status displayed in Dashboard for a disabled interface means that in case you decide to re-enable it the connection will be functional.

Me:

So it really is disabled, BUT its not shown as disbabed like other ethernetports, which are disabled and shown grey?

Support:

Yes, that is correct. The WAN ports are just showing "Configured as: Disabled"

[Colwelltn]

This has been a neat feature and a good way to fail a site to WAN2 if the site is having problems with WAN1, but not severe enough for SD-WAN to fail the site to WAN2, or in instances where SD-WAN is disabled.  This is great when the site is having problems with VoIP and cannot call in, or if the equipment is in a tough location.  It is also very helpful as it basically disableds the use of the port, so the uplink graphs still display the connection quality so you know when to enable the port again without having to call the site, reconnet a cable, then find out it is not ready to be used, and disconnect it again.

[SoCalRacer]

The picture you posted is of the Ethernet tab. It should be under the configure tab. Were you prompted for local login (usually serial number)

[kYutobi]

Usually local status page does it like @SoCalRacer mentioned. 

[ahmedabbas]

i was making the daily check on meraki i found the wan2 is Failed so how to solve this issue?

[Dunky]

Find out why the internet is not reachable over that link.

Is the MX port up?

Is the router/modem up?

is the WAN side of the router/modem up?

Is there anything in the Event Log?

Just standard troubleshooting really.

Sorry cant be of much more help than that.