Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Network-dad
Network-dad
A model citizen
Member since Aug 4, 2018
May 15 2023
Community Record
296
Posts
299
Kudos
8
Solutions
Badges
Jun 19 2020
10:51 AM
1 Kudo
You can not have multiple VLAN's on a single SSID.... you could have several SSID with one VLAN each then a route statement on the firewall.....
... View more
Jun 18 2020
8:42 AM
1 Kudo
@Marlon1 well you came to the right place.... just start asking questions... we are all more than happy to help and give advice... For learning how it works I would recommend taking the ECMS1 class https://community.meraki.com/t5/Learning-Hub/ct-p/hub
... View more
Jun 18 2020
8:38 AM
1 Kudo
@PhilipDAth Thank you for all the questions. @PhilipDAth wrote: I assume you can specify multiple encryption options, to make both the weaker and stronger work at the same time I'm not sure yet I need to do some exploring with this and develop this more. @PhilipDAth wrote: Can you use SHA256 as well, and get rid of the horrible SHA1? As far as I'm aware Sha256 is not currently supported by Meraki MX firewalls 😣 @PhilipDAth wrote: When you had Meraki update your client VPN settings - did you specify what you wanted, or they told you what you were going to get? Meraki recommended DH5 and a requested to go up to DH14.. wanted it to be a bit more secure. Hope this was helpful.
... View more
Jun 17 2020
2:27 PM
4 Kudos
Hello Everyone, Hopefully this can help someone who is having issues with Client VPN and PCI. Hopefully this is helpful We were having issues passing PCI scans due to Meraki Client VPN.. After several call Meraki Support change the Client VPN Encryption to more stringent requirements (AES128 encryption with DH group 14 - Required by PCI-DSS 3.2). Now had to update all my end points to use this new encryption standard and configure the Meraki Client VPN... I was able to cerate a small PowerShell Script to automate this process for me and set all the settings needed. $ServerAddress = "xxx.xxx.xxx.xxx"
$ConnectionName = "Meraki Client VPN"
$PresharedKey = "A Password"
Add-VpnConnection -Name "$ConnectionName" -ServerAddress "$ServerAddress" -TunnelType L2tp -L2tpPsk "$PresharedKey" -AuthenticationMethod PAP -Force
Start-Sleep -m 100
New-NetIPsecMainModeCryptoProposal -Encryption AESGCM128 -Hash SHA1 -KeyExchange DH14 Please note this only works on Windows 10 as far as I can tell. Meraki also has put out an article about there recommended settings for this: https://documentation.meraki.com/MX/Client_VPN/MX_Security_Audit_Failed_-_Recommended_Steps Hopefully this was helpful and if you have any questions please feel free to ask and ill do the best I can.
... View more
Jun 17 2020
2:14 PM
2 Kudos
Hello Everyone, Hopefully this can help someone who is having issues with Client VPN and PCI. We were having issues passing PCI scans due to Meraki Client VPN.. After several call Meraki Support change the Client VPN Encryption to more stringent requirements (AES128 encryption with DH group 14 - Required by PCI-DSS 3.2). Now had to update all my end points to use this new encryption standard and configure the Meraki Client VPN... I was able to cerate a small PowerShell Script to automate this process for me and set all the settings needed. $ServerAddress = "xxx.xxx.xxx.xxx"
$ConnectionName = "Meraki Client VPN"
$PresharedKey = "A Password"
Add-VpnConnection -Name "$ConnectionName" -ServerAddress "$ServerAddress" -TunnelType L2tp -L2tpPsk "$PresharedKey" -AuthenticationMethod PAP -Force
Start-Sleep -m 100
New-NetIPsecMainModeCryptoProposal -Encryption AESGCM128 -Hash SHA1 -KeyExchange DH14 Please note this only works on Windows 10 as far as I can tell. Meraki also has a artical avout Recommended Steps for this: https://documentation.meraki.com/MX/Client_VPN/MX_Security_Audit_Failed_-_Recommended_Steps Hopefully this was helpful and if you have any questions please feel free to let me know.
... View more
Jun 17 2020
1:59 PM
1 Kudo
we are a pure Windows environment so I've only tried it on windows.. here is my full script I use for deployment.. I'm working on a full write up on this as we speak. $ServerAddress = "xxx.xxx.xxx.xxx"
$ConnectionName = "Meraki Client VPN"
$PresharedKey = "A Password"
Add-VpnConnection -Name "$ConnectionName" -ServerAddress "$ServerAddress" -TunnelType L2tp -L2tpPsk "$PresharedKey" -AuthenticationMethod PAP -Force
Start-Sleep -m 100
New-NetIPsecMainModeCryptoProposal -Encryption AESGCM128 -Hash SHA1 -KeyExchange DH14
... View more
Jun 17 2020
1:51 PM
@Jwiley78 our Meraki Client VPN passes PCI scans. You have to have support up your encryption to AESGCM128 and KeyExchange to DH14 then change the encryption level on your end points... I did this via PowerShell New-NetIPsecMainModeCryptoProposal -Encryption AESGCM128 -Hash SHA1 -KeyExchange DH14
... View more
Jun 17 2020
11:37 AM
Welcome Jeff to the community!!! what part of so cal are you from?
... View more
Jun 17 2020
11:37 AM
Welcome to the community @txhomer! how's the weather down there?
... View more
Jun 17 2020
11:35 AM
Welcome to the community @yburke !! What Meraki gear are you the most interested in?
... View more
Jun 17 2020
11:34 AM
Welcome to the community!!! Sounds like its time to throw an MX (Security Appliance) to your network... lol
... View more
Jun 17 2020
11:33 AM
Welcome to the community!!! I'm glad to hear that your Meraki gear is working great for you! if you have any issues with it feel free to ask away... we are here to help!
... View more
Jun 17 2020
10:22 AM
3 Kudos
We were having issues passing PCI scans due to Meraki Client VPN.. After several call Meraki Support change the Client VPN Encryption to more stringent requirements (AES128 encryption with DH group 14 - Required by PCI-DSS 3.2). Now had to update all my end points to use this new encryption standard and configure the Meraki Client VPN... I was able to cerate a small PowerShell Script to automate this process for me and set all the settings needed. $ServerAddress = "xxx.xxx.xxx.xxx"
$ConnectionName = "Meraki Client VPN"
$PresharedKey = "A Password"
Add-VpnConnection -Name "$ConnectionName" -ServerAddress "$ServerAddress" -TunnelType L2tp -L2tpPsk "$PresharedKey" -AuthenticationMethod PAP -Force
Start-Sleep -m 100
New-NetIPsecMainModeCryptoProposal -Encryption AESGCM128 -Hash SHA1 -KeyExchange DH14
... View more
Jun 17 2020
9:22 AM
1 Kudo
If you have any questions or advice please don't hesitate to ask!
... View more
Jun 17 2020
9:18 AM
Check out this article.. it may give you some insight on what's going on... https://documentation.meraki.com/MR/Radio_Settings/MR_Wireless_Regulatory_Domains
... View more
Jun 17 2020
9:13 AM
@IgorPodgorny I would have to disagree.. as long as you have an appropriately size MX it is one of the best firewalls money can buy. But a lot of the time people don't size there appliances approitaply for there environment or future proofing.
... View more
Jun 17 2020
9:09 AM
I had this happen to me last week... after several power cycles of the device I was finally able to get it to reconnect.. the reboot button didn't do it I had to have someone physically power cycle the MX.
... View more
Jun 17 2020
8:40 AM
Welcome to the community! Have you got a chance to take the ECMS 1 & 2 yet?
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 3743 | Jul 7 2020 9:06 AM | |
| 5494 | Jun 23 2020 10:23 AM | |
| 1872 | Jun 17 2020 8:08 AM | |
| 1611 | Jun 9 2020 9:23 AM | |
| 4962 | Jun 2 2020 12:47 PM | |
| 2797 | Oct 31 2019 9:10 AM | |
| 2978 | Oct 21 2019 11:15 AM | |
| 3574 | Oct 4 2019 12:42 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 11 | 11987 | |
| 10 | 7113 | |
| 10 | 6793 | |
| 10 | 3182 | |
| 9 | 104048 |
© 2024 Cisco Systems, Inc.
