Meraki

KRobert · ‎Nov 27 2019

I had to discover a better real-time syslog monitor once we transitioned to Meraki MXs for our Firewalls. I found Syslog Watcher as an option. You can get a 30-day free trial and if needed, support can extend it...and extend it...and extend....I digress. We ended up purchasing it because it is a pretty powerful real time monitoring tool and it only cost $250 for a year or $450 for 3 years. It has helped tremendously with real-time traffic viewing from the firewall. If anyone questions whether or not data is getting to, through, or blocked by the firewall, this software can let you know and answer right away. Filtering is pretty simple and you can store logs to go back and query previous logs. We use Solarwinds Orion for an SNMP server, but for syslog it was missing a lot of the features that Syslog watcher made up in .

KRobert · ‎Nov 27 2019

It is a real honor to be a part of a community that is rich in knowledge and knowledgeable people. Thanks everyone for the kinds words!

KRobert · ‎Nov 12 2019

Hi @BrechtSchamp, Here is the link: https://meraki.wistia.com/medias/wrj0x3zbj7

KRobert · ‎Nov 8 2019

Happy Birthday Community!!!!

KRobert · ‎Nov 4 2019

All IPs and VLANs are made up for privacy.

KRobert · ‎Nov 4 2019

I am having an issue that relates to a switch with a L3 interface setup for a Comcast EDI configuration. Please see the following community strings for how I set this up. Long version https://community.meraki.com/t5/Switching/Meraki-and-Comcast-EDI/m-p/36808 - @BrechtSchamp Short version https://community.meraki.com/t5/Switching/30-and-29-comcast-edi-issue/m-p/37128 My MX250 appliances are setup to use a publicly routable network that Comcast provided. I have set this up as VLAN 3001 with a 55.100.100.0/27 network. If I were to just place the MX appliances in the VLAN, it would show that my WAN connection is up in the Meraki Dashboard. The problem I am running into is that we need to place an IPS pass-through appliance between the Comcast IPS and the MX appliances. When we do this, I can still ping the IP addresses successfully of the MX appliances, but the Dashboard is saying the WAN is failing. Here is the topology layout: Comcast's network provides a 50.10.20.30/30 network. Comcast has 50.10.20.31 as the gateway. I created a L3 interface (VLAN 3000) on our edge switch with an IP off 50.10.20.32. This creates a default route similar to what is seen in the links above. Comcast provides a routable IP subnet 55.100.100.0/27. I then created a 2nd L3 interface (VLAN 3001) with IP address 55.100.100.1. The External IPS port is connected to the switch and is setup on VLAN 3001 with an IP of 55.100.100.2. The Internal IPS port is connected to the switch and is setup on VLAN 3002. The MX appliances have their WAN ports connected to the switch and are in VLAN 3002. I can ping all appliances and devices within the 55.100.100.0/27 network, but the dashboard is saying it is failing. If I move the the MX WAN connections to VLAN 3001, the dashboard says it is active. Has anyone ran into this issue and does anyone have a solution. It would be greatly appreciated.

KRobert · ‎Nov 1 2019

How many sites do you have? Are you running a Hub and Spoke Meraki VPN setup or a full mesh one?

KRobert · ‎Nov 1 2019

We provide all of our home VPN users with a Z3 and have no issue with the licensing. The Z3s are awesome. If you have any road warriors, I highly recommend the Z3C.

KRobert · ‎Oct 30 2019

Hey @Nash, Thanks for that. I meant a 2FA key fob, but forgot the key fob part 😁. Thanks for the link to the 2FA VPN though!

KRobert · ‎Oct 30 2019

Hello Community! For anyone that doesn't know, Cisco Meraki is having an unknown webinar November 5! If you haven't heard about it, here is the link to sign up for the webinar. https://meraki.cisco.com/security-made-simple What could it be? 2FA VPN Key Fob like Google? A Starlink Competitor? Leave a comment on what you think it could be.

KRobert · ‎Oct 29 2019

Hi @tantony, I hope this helped solve your issue. @JohnnyMeraki made a good point to mention the https://meraki.cisco.com/firstyearonus/en which provides additional cost savings. Unfortunately Cisco's EoY is at the end of July so you wont be able to receive any potential EoY savings.

KRobert · ‎Oct 29 2019

I was our test environment as a spoke network replica. Since most of our spoke locations are pretty cookie-cutter, I can easily scale my test results from one network to dozens. Also any updates that we do that would affect our spoke networks and the equipment (Meraki or not). From there I test pretty much anything we don't use on a daily basis. VPN Setup, new features, baseline testing, policies, bug bounty hunting :-). It is a test environment so I like to break it because I know I can just rebuild it.

KRobert · ‎Oct 29 2019

https://www.tapad.com/ Make sure you use incognito browsing. 😁

KRobert · ‎Oct 29 2019

This is awesome @Uberseehandel! It really shows the versatility of Meraki.

KRobert · ‎Oct 28 2019

Aha! right in front of me the whole time.😆 @jdsilva's blog for anyone who is interested! http://blog.brokennetwork.ca/

KRobert · ‎Oct 28 2019

Haha @jdsilva! If you have a blog, I'd love to see it. I do have to say the Meraki Community is invaluable and wouldn't be where it is today without power users like you, @PhilipDAth, @NolanHerring, @BrechtSchamp and many other top community posting champions. The more information out there the better!

KRobert · ‎Oct 28 2019

Hello Meraki Community! I know @MeredithW posted a few months ago about where to find helpful Meraki information. I wanted to provide a few more resources that I find helpful on a daily basis. Below is also @MeredithW original post. Hope this helps in your Meraki findings! MeredithW post - https://community.meraki.com/t5/Community-Tips-Tricks/Where-on-the-internet-is-Cisco-Meraki-content/td-p/46678 https://www.willette.works/ - Aaron is a Meraki SE that goes over great points in his blog. Very easy to follow and does a great job explaining Meraki processes. https://www.jscmgroup.com/meraki-blog - Very simple blog if you are looking for simplicity beyond the Meraki Documentation. https://meraki.cisco.com/blog/ - This is an overlap of Meredith's posting, but a good one. Enjoy!

KRobert · ‎Oct 28 2019

I would definitely reach out to them then and see if they can provide more accurate 1 and 3 year quotes. They can most likely provide more accurate pricing than the Meraki Calculator page, but The cost calculator is helpful when having those budgetary conversations. Hope this helps @tantony!

KRobert · ‎Oct 28 2019

Did you purchase directly from Meraki or through a 3rd party vendor? Typically they can provide the quote history. If you would like to know the cost at MSRP, you can use the Meraki Calculator here: https://meraki.cisco.com/buy/cost-calculator

KRobert · ‎Oct 28 2019

Marketo or GoGoGuest

KRobert · ‎Oct 28 2019

That is awesome! I am glad this helped you find a great solution.

KRobert · ‎Oct 28 2019

@CarolineS although you will be taking on a new adventure in what some say is the toughest job anyone could have, the community wishes you the best. The great thing is that this is an open and free community so feel free to stop in an post updates every once in a while! Cheers and thanks @PhilipDAth for bringing this to the community's attention. @MeredithW, as always we know you'll look after the community as greatly as you have been. Thank you for that.

KRobert · ‎Oct 28 2019

Since the MX is preforming the routing, it is definitely a better option to use Layer 3 firewall rules rather than the ACL. The L3 rules are a little different than other firewall/router rules, but overall much easier than the MS ACLs.

KRobert · ‎Oct 28 2019

Is this a 1-arm Concentrator Hub, or a NAT Concentrator Hub? Do you have an upstream layer 3 appliance performing the routing?

KRobert · ‎Oct 24 2019

@BrechtSchamp answers this in another post a few months ago. https://community.meraki.com/t5/Security-SD-WAN/MX250-RSTP/td-p/38708 MX250s do not participate in STP. Hope this helps

About KRobert

KRobert

Robert Kremnitzer

Community Record

Badges