Meraki

DarrenOC · ‎Oct 7 2020

What issue were you hitting @sebas ?

DarrenOC · ‎Oct 6 2020

Hi @BlakeRichardson , I guess tighter admin controls on the end user machines to stop them utilising/installing such features?

DarrenOC · ‎Oct 6 2020

Hi @Pipeline , whilst you may feel frustrated that the device you have procured can’t handle a 1Gbps circuit those that endeavour to answer yours and others queries aren’t employees of Cisco or Meraki. We’re engineers like yourself who give up a little bit of time to help others. Please contact your Meraki AM or Cisco partner through which you purchased the device to air your concerns.

DarrenOC · ‎Oct 6 2020

is this your office firewall? That rule after rule 26 is an explicit Allow Any Any. You're pretty much wide open with that still in place. Would be worth adding in an explicit Deny Any Any rule in before it. As you have access to the Outbound Firewall rules below your inbound I would also apply the vpn rules to your outbound rules also. Where you've configure Any for Source subnet can you not be more specific and tie this down just to your internal data subnet?

DarrenOC · ‎Oct 6 2020

Hi @cyriel95 , something along the lines of the below config. Lets say your internal users subnet is 10.10.10.0/24 the rule should block any traffic from that subnet using ports 500 and 4500 which are the typical VPN ports.

DarrenOC · ‎Oct 6 2020

Could you place a Cisco WLC on your network and let me know if it kills the wifi every 24 hours

DarrenOC · ‎Oct 6 2020

Both UDP

DarrenOC · ‎Oct 6 2020

What about a Layer 3 firewall rule blocking ports 500 and 4500 from your internal user subnets?

DarrenOC · ‎Oct 6 2020

Finally: BUG FIXES ARP entry on L3 switch can expire despite still being in use (predates MS 10.x That one was knocking out a clients Wifi network on a legacy Cisco WLC cluster

DarrenOC · ‎Oct 5 2020

Welcome to the board and good luck with your deployment. im sure you’ve read this already: https://documentation.meraki.com/MX/Installation_Guides/vMX100_Setup_Guide_for_Microsoft_Azure

DarrenOC · ‎Oct 5 2020

Hi @Sharyn , the two will play nicely. Still Meraki technology albeit ones physical and the other virtual.

DarrenOC · ‎Oct 4 2020

😁 Good game @PhilipDAth , that last post was a clever move. The game is afoot

DarrenOC · ‎Oct 3 2020

Hi @roesljas , that’s exactly what we use the combined stacks of 225’s and 210’s for. With regards your other queries. Why not get your hands on some eqpt, lab it up and work your design out piece by piece. When you get stuck at a certain point raise it back here.

DarrenOC · ‎Oct 3 2020

Congrats all. Sterling effort @cyriel95 , @KarstenI and @GreenMan

DarrenOC · ‎Oct 2 2020

Hi @roesljas , yes, I believe that design should work. As you say, configure local VLANs on the stack of ms225’s and 210’s with other VLANs on your MX with routes configured between the two where required. With regards DHCP relay, likewise that should also work. Can you get hold of trial gear to prove it?

DarrenOC · ‎Oct 2 2020

Sorry @kYutobi , you can stack the 210 with the 225’s. They’re the exception: https://documentation.meraki.com/MS/Stacking/Switch_Stacks

DarrenOC · ‎Oct 1 2020

Let us know how you get on.

DarrenOC · ‎Oct 1 2020

Hi @KirkM , are you setting the mgmt IP via the mgmt port or via the dashboard? We’ve had some funnies in the past where setting via the dashboard the settings would take effect.

DarrenOC · ‎Oct 1 2020

Hi @KirkM , what weird issue are you seeing?

DarrenOC · ‎Oct 1 2020

Hi @KirkM , our approach would be to configure the Meraki device management vlan on your firewall. Patch your new Meraki devices into them and let them register out. Assuming to have all your VLANs and IP sublets documented. During an outage Window disconnect your existing core off the network. Replace with new core. Configure VLANs, IP subnets and switchport configs.

DarrenOC · ‎Oct 1 2020

Hi @Tehsin , firstly, is the MX registered out to the cloud and operational? Are you using DDNS on the MX, are you connecting in via host name or IP? https://documentation.meraki.com/MX/Other_Topics/Dynamic_DNS_(DDNS) Are you seeing the vpn traffic hit your internet interface on the MX? You should be able to see this via a packet capture. if you’re not seeing that traffic your net gear may need to be configured with port forwarding for the vpn traffic. Ports 500 and 4500

DarrenOC · ‎Oct 1 2020

Hi @Robin1 , start your journey here https://community.meraki.com/t5/Learning-Hub/ct-p/hub

DarrenOC · ‎Oct 1 2020

https://community.meraki.com/t5/Learning-Hub/ct-p/hub

DarrenOC · ‎Oct 1 2020

Hi Emma, welcome. If you’re new to Meraki I would take a look at the training material available on this site

DarrenOC · ‎Oct 1 2020

You’ve not read the original post @Maclanta The question was can we use a 1Gbps Transceiver in a 10Gbps port. Not do Cisco manufacture a 1-10Gbp sfp Meraki also have available some mulitgig switches such as the MS390 and MS355 https://meraki.cisco.com/products/switches/models/#tabs All available Cisco SFPs can be found https://www.cisco.com/c/en/us/products/collateral/interfaces-modules/gigabit-ethernet-gbic-sfp-modules/datasheet-c78-366584.html

About DarrenOC

DarrenOC

Darren O'Connor

Community Record

Badges