Hi, first time using MX and so far the experience is very good. Right now we're using MX67 as our gateway, a few days ago we experience network outage several times during live conference and trying to find out why the outage occured. I've checked on the ISP NMS and can confirm their network doesn't have problem.
Some question here :
I suspect this happened because Meraki have packet overload from 100 clients, but still confused why the utilization is low.
Hi @and12345
https://documentation.meraki.com/MX/Monitoring_and_Reporting/Device_Utilization
Have you checked out the device utilisation stats on the MX.
Never purposely overloaded an MX so not sure on what behaviour you would see or expect. One would assume it may grind to a halt...!
Hi, the utilization is low, but we got a lot of event dropped on the event log
@and12345 can you send the events to a syslog server where hopefully we can see why there are so many events and why they are being dropped?
I seem to remember there can be a storage issue on the small MXs, might be worth getting support to take a look at that.
@and12345 if you ask the support team they can see more metrics, having more clients connected than recommend doesn't automatically cause issues, we often have 100+ going through MX64/5/7 for the public internet connection at our venues but they are running the enterprise software with little in the way of policies and many of the clients are smartphones only doing occasional background checks. However our MX tend to sit at about 5-10% CPU load...
Couple of things I'd check in SD-WAN\Config\Traffic Shaping: 1) don't set the WAN uplink limits to exactly match your service; leave some buffer. 2) same location Traffic Shaping Rules enable the default rules; they help greatly prioritizing traffic. This same setting can be set if you're using Meraki WiFi as well.
Opening ticket to the support and they confirm the cause of network down is because MX overload, the event dropped log is because of spike of traffic that not getting logged on MX utilization. Maybe its time to look for bigger firewall.