Meraki

KRobert · ‎Oct 24 2019

Hi @Cast This link may help regarding connecting non-meraki VPNs with Meraki's Auto-VPN. https://www.willette.works/merging-meraki-vpns/ AutoVPN + non-Meraki VPN Integration Considerations Only subnets local to the MX can be advertised to the remote Non-Meraki VPN peer. The subnets specifically selected as Use VPN, yes on the Security appliance > Site-to-site VPN configuration page will be included as the local interesting traffic in the IPSec exchange. Non-Meraki VPN routes are not advertised to OSPF or BGP peers. Non-Meraki VPN remote subnets cannot overlap with existing local, static, or AutoVPN routes. Doing so generates a Dashboard validation error when trying to save the configuration. Non-Meraki VPN routes are not advertised to AutoVPN peers.

KRobert · ‎Oct 23 2019

We recently purchased the Z3C and we are getting the same experience. A true Plug-n-Play setup!

KRobert · ‎Oct 23 2019

I forgot about my Meraki USB converter! I got one of those right as USB-C started to be more mainstream so it was my go to accessory for a while. It is now my go to emergency cable.

KRobert · ‎Oct 22 2019

I forgot how cool that fridge was! Meraki definitely has a creative swag team.

KRobert · ‎Oct 22 2019

Gotta love that #VanLife haha.

KRobert · ‎Oct 22 2019

@jdsilva That is some awesome swag you have! My collection is growing with a mug and the mini block set.

KRobert · ‎Oct 22 2019

What is your favorite Meraki swag that you have seen/won? What would you like to see as Meraki swag? I'm not saying we can make it happen, but it may give @MeredithW some ideas for the future! Favorite Swag Seen/Won: Hands down the Gnomes. They are unique and not like any other swag. What I'd like to see as swag : A back pack or drawstring bag resembling the canvas bag power cables come in.

KRobert · ‎Oct 22 2019

Done and Done! Who else thinks Meraki swag is the best?

KRobert · ‎Oct 22 2019

I agree! It is a small detail, but one of my favorites as well.

KRobert · ‎Oct 22 2019

If anyone is looking to rack mount MX64-68, MX64-68W, or MX67-68CW appliances, Rack Mount IT is a great place to find a customized Meraki mount. https://www.rackmount.it/vendors/cisco.html

KRobert · ‎Oct 22 2019

Good point @jdsilva. I'd say the best option is to add an MX65 at the very least followed by a MX67 or MX68. If you need it to be a rack mounted option, you could even do an MX84, but I wouldn't go beyond that. Another rack mount alternative for MX64-68 are from the company RackMount.IT - https://www.rackmount.it/vendors/cisco.html

KRobert · ‎Oct 22 2019

You can definitely do what @kYutobi is suggesting. We like to keep our Guest network separate from our primary equipment so we use a separate MX65 for all Guest traffic.

KRobert · ‎Oct 22 2019

Hi @JaysonPogi, Per the Meraki Documentation: Note: Each access point has a technical limitation of 128 clients maximum per radio. Please note that this is only a theoretical maximum; in practice, interference caused by multiple clients communicating simultaneously will cause this limit to be far lower. https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Approximating_Maximum_Clients_per_Access_Point Hope this helps.

KRobert · ‎Oct 21 2019

Hi @WiFiJedi, Could you provide an example for what you mean? Thank you,

KRobert · ‎Oct 17 2019

I would definitely stop allowing RDP from any and limit to your supplier's IP address at minimum. If your supplier only needs it at specific times, you can set a rule to deny RDP traffic from the supplier, then when the supplier needs access you can change the rule from deny to allow. This would control the window of time when RDP is actually accessible and can help with security on your side. If your supplier was ever compromised, and you have the rule open 24/7, that could open you up to a potential lateral attack. Manually allowing at specific times will at least block from that potential threat. a 3rd party software similar to LogMeIn or TeamViewer is probably best since they would need software authentication and typically uses 443 to connect to your server.

KRobert · ‎Oct 17 2019

@BrechtSchamp is on-point here. If you have 2 WAN up-links, then you can enabled load balancing and traffic shaping will steer to whatever WAN you decide via Flow Preferences.

KRobert · ‎Oct 15 2019

We have been waiting for this ever since migrating from Cisco ASAs!

KRobert · ‎Oct 10 2019

Glad you got it to work!

KRobert · ‎Oct 9 2019

Hi @ShadowoftheDark, This link may help regarding connecting non-meraki VPNs with Meraki's Auto-VPN. https://www.willette.works/merging-meraki-vpns/ AutoVPN + non-Meraki VPN Integration Considerations Only subnets local to the MX can be advertised to the remote Non-Meraki VPN peer. The subnets specifically selected as Use VPN, yes on the Security appliance > Site-to-site VPN configuration page will be included as the local interesting traffic in the IPSec exchange. Non-Meraki VPN routes are not advertised to OSPF or BGP peers. Non-Meraki VPN remote subnets cannot overlap with existing local, static, or AutoVPN routes. Doing so generates a Dashboard validation error when trying to save the configuration. Non-Meraki VPN routes are not advertised to AutoVPN peers.

KRobert · ‎Oct 7 2019

Bite the bullet and do it @cmr!

KRobert · ‎Oct 7 2019

From a non-biased perspective, I agree. Meraki is more commercial SMB, and larger. Ubiquity is definitely the budget friendly version of Meraki for SOHO and Home networks.

KRobert · ‎Oct 7 2019

Yes, https://documentation.meraki.com/MX/Networks_and_Routing/MX_Addressing_and_VLANs In Routing->Subnets: In VPN: Determines whether the MX advertises this VLAN to site-to-site VPN peers.

KRobert · ‎Oct 7 2019

When I looked at the MSRP of some cables I was sticker shocked! Amazon almost always comes in for the win.

KRobert · ‎Oct 7 2019

If you are looking for managing/automating changes for equipment from multiple vendors ( or Cisco and Cisco Meraki), you may want to look at a product like https://www.ansible.com. Otherwise @NolanHerring is right in saying you can't manage non-Meraki equipment in the Meraki dashboard.

KRobert · ‎Oct 7 2019

I definitely am drinking the Meraki Kool-aid! The podcast just makes it as easy as Capri-Sun!

About KRobert

KRobert

Robert Kremnitzer

Community Record

Badges