cisco router swap with meraki mx

[Alan79]

Hi All,

I am trying to replace my exiting mx67 with cisco 1120, but leave upstream swich MS 350.

Cisco 1120 is managed by cisco FMC, where I have managed to assign an outside interface with ISP details and on inside two sub-interfaces, one is VLAN1 and second VLAN35 for data. To facilitate migration I kept the same settings as I have on MX67, however after cable swap switch goes down and showing lost connection to the cloud.

My understanding that VLAN 1 is deemed as Native VLAN.

Wonder is somebodey could suggest  a correct process in swaping mx wit cisco router.

Thanks

[KarstenI]

If you configure VLAN 1 as a subinterface on FTD, you don't have a native VLAN. You need to confgure your VLAN1 settings on the main interface.

But to be sure better post screenshots of your settings.

[Alan79]

Unfortunatelly, on cisco 1120 I do not have ability to configure interface as VLAN unless I am missing something, this option I believe only available on cisco 1010. Below is a screen shot form FMC

---

@KarstenI wrote:

If you configure VLAN 1 as a subinterface on FTD, you don't have a native VLAN. You need to confgure your VLAN1 settings on the main interface.

But to be sure better post screenshots of your settings.

---

[KarstenI · Accepted solution]

What is now configured on your VLAN1 subinterface needs to be moved to the physical interface. It is still a routed interface and not a switch port/VLAN interface as on the 1010. But this is the way you make the traffic untagged.

[Tony-Sydney-AU]

@KarstenI is right! Some other Vendors do that kind of configuration as well. And it kind of makes sense if you consider that "Native" VLAN is UNtagged.

So in that FMC interface actually implies that all subinterfaces are tagged and the only UNtagged would be the physical. By the way, allowing UNtagged isn't the rule but the exception. Usually, you wouldn't route untagged traffic.

If you're curious, check more here in this Cisco Doc.

[Alan79]

I jhave made the above changes and i am able to ping meraki switch IP, however it is still unable to reach meraki cloud.

From Cisco I am able to ping any external ip address as well as internal, I did check packet tracer and it allows all subnets to outside interface in ACL.

Current config:

On Meraki I keep native Vlan 1 with allow all vlans and on Cisco subnet from VLAN 1 has been moved onto the interface as gateway (.1).

[KarstenI]

Not really a problem for the Meraki Community. But what I see most often as a problem is a messed up NAT config on the FTD.

[Alan79]

Karstenl,

You was right in terms of NAT and Native VLAN, it brought switch online along with AP.

However, I am strugle with DNS resolustion for both meraki devices and wonder what could couse that.