Meraki

cmr · ‎Jan 15 2020

@hockeydude you are correct that one flow will only use one link but if you have more than one flow going on then both links should be active. This should be the case in most circumstances.

cmr · ‎Jan 14 2020

I'm guessing the initial drop might be to do with this known issue taken from the 15.23 release notes but is not specific to that version: Known issues After making some configuration changes on MX84 appliances, a brief period of packet loss may occur. This will affect all MX84 appliances on all MX firmware versions Not sure why that would mean you need to reboot the phones but it could be a trigger?

cmr · ‎Jan 13 2020

The MX should already know those, this section is for adding routes that are not known to Meraki, i.e the ones the other side of the Palo that you want the other Meraki SD-WAN sites to know about.

cmr · ‎Jan 13 2020

Do the second and third blanks reference items in the site that this MX is in, or another site? Do you have a summary route on the MX that includes the one you are trying to add?

cmr · ‎Jan 13 2020

In routed mode, add the routes on Security & SD-WAN / Addressing & VLANs where you can set a gateway to the other network, sorry, post above was how to do it in concentrator mode. Then on the other tab make sure to set VPN on under VPN settings for each network you want the other sites to know about.

cmr · ‎Jan 13 2020

The routes behind the Palo are considered local to the MX if you want other Auto-VPN members to be able to see them, is that what you want?

cmr · ‎Jan 13 2020

You add them under the Security & SD-WAN / Site-to-site VPN page where you changed it from Spoke to Hub and enable VPN participation as below:

cmr · ‎Jan 13 2020

@Cole has the MX in pass-through mode at the moment, so WAN should be okay. However it is also set up as a spoke so that won't work as far as I know.

cmr · ‎Jan 13 2020

We use quite a few 8821s and the 26.x roaming issues we also had were resolved in about 26.4 for us. We are on 26.6 and 26.6.1 depending on site and at least with 26.6 the issue has been resolved. We'll learn this week whether 26.6.1 leaves it working or...

cmr · ‎Jan 11 2020

As it is routed it must be separate VLANs either side. Are you on the WAN side, or the LAN side? Is the device you need to say/telnet to on the WAN side or the LAN side?

cmr · ‎Jan 11 2020

If you change the MX to a hub, you can set exit hubs and this gets rid of one of the negatives. The other main one being number of tunnels, so this may not affect you unless you have a lot of sites: The top exit hub is used unless it goes down, then the next will take over.

cmr · ‎Jan 11 2020

Oops, my bad! As @jdsilva said, the issue appears to be simply it being a spoke, not a hub. I'd only tried it in concentrator mode and wasn't aware the guidelines had changed.

cmr · ‎Jan 11 2020

@Cole in order to use OSPF advertisements, you need to have the MX in VPN concentrator mode, not routing or pass through mode. If in this mode it would also normally be the hub of the VPN, not a spoke.

cmr · ‎Jan 10 2020

Or as you have them all, reconnect stack and connect as before as that might allow connection to break stack.

cmr · ‎Jan 9 2020

Simply select load balancing as below and your clients will use both links, if either is down all traffic goes to the other. We have been using this for over 6 months and it works perfectly.

cmr · ‎Jan 8 2020

It has also become the stable version...!

cmr · ‎Jan 8 2020

I've been running an MX64 as an internet firewall and an HA pair of MX84s as a hub of an SD-WAN all day with this firmware and so far, so good. Upgrading another set of sites tomorrow.

cmr · ‎Jan 8 2020

It seems to have replaced 26.6 without fixing anything, is a new AP about to be released?

cmr · ‎Dec 31 2019

You can RMA it if needed, I had an MR32 replaced with a dim LED as we have remote sites and the light is a useful diagnostic for non tech savvy users.

cmr · ‎Dec 27 2019

I think there was, very briefly, a 15.22 but the whole release train has been suspended due to some issues with specific models. I have been chasing support for updates but the last I managed to get was a non-specific "soon". You can log a ticket to get support to install 15.x updates if your model isn't one of the affected ones. If it was, you should have received a message from them in the dashboard.

cmr · ‎Dec 26 2019

@PhilipDAth absolutely, we get this from some EPoS terminals that aren't used all the time.

cmr · ‎Dec 26 2019

We use MS120, 210, 220 and 225 with networks that carry surveillance streams. We mainly use Axis and Bosch cameras, though do have some Samsung so I think you'll be just fine as we've had no issues in months. In fact they are excellent for this as you get good data on the streams, we picked up one quad FHD panoramic camera with a 24Mb stream...

cmr · ‎Dec 17 2019

In the Meraki dashboard you have an Organisation and one or more networks inside it. Each network can contain switches, APs and a router (or HA pair). The switch used for the WAN split should be in a separate network to the routers (MXs).

cmr · ‎Dec 17 2019

When using the MS, you do have it in a separate network to the MXs don't you? If in the same it can cause issues.

cmr · ‎Dec 17 2019

@sebastianfrancowe also tried Purple and while the technology does work, it stopped 90% (yes ninety percent) of our customers using the WiFi so we canned it.

About cmr

cmr

Community Record

Badges