Meraki

cmr · ‎Aug 16 2019

Why do you have an MX at the branch if you want to just let all traffic in and out without NAT? What is it you want to achieve?

cmr · ‎Aug 15 2019

I changed the time in ours to last week instead of last day and then they do not overlap with each other, but sites that haven't been up for the whole week simply don't have a legend... I'll see if it fixes itself tomorrow...

cmr · ‎Aug 15 2019

I think I prefer my bug! How long as your site-site VPN been up and passing traffic? I think it takes about an hour or so before it populates.

cmr · ‎Aug 15 2019

It is in Security & SDWAN / VPN Status, but you must enable the new version (link in top right I think from memory). It worked fine until we added a 5th site and now they all overlap on the RHS...

cmr · ‎Aug 15 2019

It's at the top of the page 🤣

cmr · ‎Aug 15 2019

So close, yet so far, n184 still having issues with in particular photos on the location tab, you can access it but you have to refresh the page after it initially fails to load each time.

cmr · ‎Aug 15 2019

We have had the same issue with some Windows 10 Dell devices and believe in our case that it is more related to our non-Meraki firewalls as a different SSID for public use that goes out through an MX is okay. Have you tried that to see if it is the case?

cmr · ‎Aug 15 2019

Is it normal for the SD-WAN pie legends to be all but illegible due to them being stacked together or are we simply unlucky?

cmr · ‎Aug 14 2019

n184 location tab fails to load and has for 2+ days

cmr · ‎Aug 13 2019

If you access the internet from the Shanghai office does it go straight out or via the Hong Kong office? If so then plug the MX into the LAN port of the wireguard. If not then... At the moment with the wireguard VPN you are advertising 192.168.110.0/24 from HK, can you also advertise 192.168.100.0/24 from HK to Shanghai?

cmr · ‎Aug 12 2019

Yes but check the Air Marshal protection as the two networks advertising the same SSID on one LAN might cause an issue. Set it to not block and then once all live you will see whether you can enable it.

cmr · ‎Aug 8 2019

Create two SSIDs, one called guest on certain APs using the tag option and the other called free on all APs but on a schedule.

cmr · ‎Aug 8 2019

You set the SSID to be only available on APs with tag xxxx. On the APs where you want the SSID, you add that tag.

cmr · ‎Aug 8 2019

Thanks Philip, I hoped that'd be the case, we will of course change the routes ASAP but I want to drop as few packets as possible 🙂

cmr · ‎Aug 8 2019

We currently have an MX250 in single arm concentrator mode terminating our SD-WAN site-site VPNs. We have an additional MX250 with its own static IP connected internet connection but not added to any Meraki network. When we go to set up the second device as a warm spare and pick the serial number from the list of available devices, we will choose the virtual IP. The current active (to be primary) MX has an IP of n.n.n.201/24 The new (to be standby) MX has an IP of n.n.n.202/24 The virtual IP will be set as n.n.n.200/24 On the L3 switch stack that the MXs are connected to we have static routes for the subnets that are over the VPN pointing to the current active MX on IP n.n.n.201 as we are not using the OSPF advertisement option. My question is, when we add the warm spare, will the existing traffic continue to pass via the n.n.n.201 address before we change the routes to point to the n.n.n.200 virtual IP? My guess is that it would, but that is based on Cisco HSRP knowledge and I understand that the Meraki's use VRRP which of course is a generic version... Thank you for your time, Charles

cmr · ‎Aug 7 2019

Is the address further down that path to the internet, perhaps an ISP gateway? We use MXs internally for SD-WAN and they all report a device several hops downstream that is the final breakout onto the internet.

cmr · ‎Aug 7 2019

I know this is closed but with the 15.x firmware this now can be done through the web GUI. Tested in 15.14 and 15.15

cmr · ‎Aug 7 2019

I'm saying one may already be configured as such, that is the only way I would expect to see a WAN2 reference, I'm guessing this is not the case then?

cmr · ‎Aug 7 2019

Not sure on the 60 but on the 64 one of the LAN ports can be configured as WAN. If you go to the local status page at MX.meraki.com from the LAN this should be clear. On newer firmwares it is visible and changeable from the web GUI

cmr · ‎Aug 7 2019

We have been using a Cisco GLC-T module for the internet connection of an MX250 that is the one arm concentrator in our main datacenter for a country-wide SD-WAN for over a month with no issues. Meraki will investigate any issues with unsupported modules, but if the module looks like it might be the cause they will ask for it to be replaced with a supported one before completing investigations.

cmr · ‎Aug 3 2019

Thanks for the link, I did wonder why our switch upgrades didn't happen when we first asked for them, now I know there is a 20 minute delay!

cmr · ‎Aug 2 2019

It shouldn't change existing config but it might add some new options set to defaults

cmr · ‎Aug 1 2019

Yes, I also saw that but as the Cisco WiFi phones also drop at the same time (and don't reconnect until AP reboot) I think something bigger is at large. We will try each new release as it comes due to needing the 26.x improvements but it is a bit of a chore...

cmr · ‎Aug 1 2019

We have a number of Ingenico PDQs and they have the same issue, on their display you actually see each wireless network repeated for each AP in range...

cmr · ‎Aug 1 2019

We've tried 26.1 through 26.4 and none are usable with Apple and Cisco mobiles in particular as they simply drop off the network far too often and don't reconnect. I'm guessing this is due to the known L3 roaming issue.

About cmr

cmr

Community Record

Badges