MX250/MS250 replacing SonicWALL NSA E5500/Dell PC6248 - No Internet

[DunJer622]

Greetings,

I'm in round 2 of an attempt to replace old equipment with Meraki.  The main issue I'm seeing now is that LAN devices are not accessing the Internet.  We have Windows Servers serving as DHCP and DNS.  Nothing has changed with those servers and they are accessible.  Devices with static info do not connect, either.  If I enable DHCP on the MX250, then that network gets Internet.  I don't see anything in the event logs.  Is something cached somewhere?  Any ideas of where to look first?

I appreciate any assistance.

Thank you,

Jeremy

[BrechtSchamp]

I'd start with the path clients take towards the internet. Use ping and tracert to see where they get blocked.

[DunJer622]

There is no DNS resolution and a tracert to 8.8.8.8 hits the switch and then fails after that.  Why would the switch be blocking anything?  Going to check my Interface settings, but there doesn't seem much that should come into play.

Thanks,

Jeremy

[BrechtSchamp]

What does your topology look like?

Client - Switch - MX - Wan-router?

Is the switch in L3 mode?

[DunJer622]

WAN routers - MX250 - MS250 - Client

MS250 is in L3 mode

[BrechtSchamp]

Can you post a screenshot of Switch > Configure > Layer 3 routing

[DunJer622]

A bit more...

The MX250 uplink port (trunk) is our Meraki Management VLAN (1) as native, while the server, phone, and workstation VLANs (10, 59-60, 202) are allowed.

The MS250 uplink port (trunk) is configured the same.

[DunJer622]

[DunJer622]

MS250 is 192.168.1.1, MX250 is 192.168.1.2

[BrechtSchamp · Accepted solution]

I'm missing the default route pointing to 192.168.1.2. Could it be the screenshot incomplete?

[DunJer622]

Found an issue...  Had 0.0.0.0 point to 192.168.1.1.  Changed it to 192.168.1.2.

[DunJer622]

Heh.  Just got your message.  You got me looking at the right place.  Going to do more testing now.

[DunJer622]

Internet appears to be working fine.  NATing appears to be an issue, though.  It is odd, though.  My Exchange email appears to be flowing correctly, but Nothing else relying on NAT is connecting.  Researching that now.

[BrechtSchamp]

Could you elaborate on what you mean with "NATing" appears to be an issue. Are we talking about outgoing NAT or incoming NAT (port forwarding/1-to-1 NAT)? Can you give a couple of examples of applications experiencing issues?

[DunJer622]

Was an issue with ISP.  I'm assuming caching.  Upon router power-cycle, everything began responding.

[BrechtSchamp]

Good to hear!