Meraki MS130 12 port Switch in Nuetral Zone is not able to connect to the Meraki Dashboard

[asendia_stuart]

We just deployed a Merki MS130 12 port switch in the nuetral zone (In front of the Meraki MX100).   The switch is allowing the Meraki MX 100 to connect to the internet but the MS130 switch is not able to connect to the Meraki Dashboard.

Any thoughts on why this is happening

Stuart Jarvis 

[Mloraditch]

The MS130 must have internet access to connect to the dashboard. Generally I connect one port of my DMZ switches back to my inside lan to allow management connectivity. You could however assign one of your ISPs available static IPs if desired. If you have multiple ISPs, I strongly recommend the former to ensure management remains up during an outage of one ISP.

[asendia_stuart]

Thank you for the response.   A couple of questions.  

1.  If you connect the switch from the DMZ to the inside, does it have to be to a Meraki Switch?

2.  In the second point you made, are you suggesting giving the Meraki switch, a static address on the

     internet?

Thanks again for you assistance

[Mloraditch]

1. No, as long as the port will provide Internet access that allows for connectivity (https://documentation.meraki.com/General_Administration/Other_Topics/Upstream_Firewall_Rules_for_Clo...) you will be fine.

2. Yes. 

[Jeremy_Meraki]

Hi @asendia_stuart!

Please find some topology diagrams for the deployment of the MS acting as a WAN breakout switch below:

https://docs.google.com/presentation/d/1xsb8imtUFjN13so86kIZ04IR9f6WEKdbpUrYVON64Zg/edit#slide=id.ge...

As @Mloraditch mentioned, connecting the MS130 to the Internet can be achieved by connecting it to the LAN of the MX100 as outlined in slide 3. In this example, please ensure you are pruning VLAN 900 + 1000 from all other LAN links of the MX to avoid network loops.

I also want to mention that it's recommended to place the breakout switch(es) in their own dashboard network. This helps maintain correct network topology diagrams and client tracking in dashboard as well as provides more granular control for firmware upgrades.