Meraki

Mike38 · ‎Aug 29 2022

This sounds like the most practical solution for us. Thanks!

wildfowlbridge · ‎Aug 29 2022

Yass!

Jmccandles · ‎Aug 28 2022

I am using Meraki MX 250 appliance with OS as MX 16.16, actually i was planning to block 3rd part VPN from L7 firewall rules. Thank you for the info.

AmyReyes · ‎Aug 25 2022

Thanks for flagging, @MerryAki! I took care of it.

EzSylester1 · ‎Aug 24 2022

Happy anniversary to all Merakies and all the best

rwiesmann · ‎Aug 24 2022

Already done for LinkedIn Do not like Twitter as others here... No chances to win as l live in europe..

akfrnd · ‎Aug 23 2022

CONGRATS!

Speedbird1 · ‎Aug 19 2022

Thanks for that Most our clients range from 48-70db Just a few mobiles around the 30db No others below 30db

Gislavedshus · ‎Aug 19 2022

How do i know if this device which connet with this port has access to the internet? if i am away

Adeldardari · ‎Aug 17 2022

Just an update; service provider did not provide us /29. What we did was to utilize the 2nd 4G uplink (MG21) so that MX1 gets two uplinks ( fiber + 4G) , and MX2 ends up with 1 uplink (4G). We made sure that both MX1/MX2 are connected to a LAN switch with trunk ports for keep alive mechanism. We dropped MX1 and failover worked.

pcrequest · ‎Aug 17 2022

It wasn't clicking for me what the Local page was. I rarely get to touch see or touch the hardware. So I'll need to remote into a laptop into the site to reach the Local page. Thanks.

KarstenI · ‎Aug 17 2022

As a next step I would power cycle the AP and capture the traffic on the switch-port. There you see what the AP does. For example if it ARPs for it's own IP or tries to send out data with that IP. That could give you some hints.

GIdenJoe · ‎Aug 15 2022

Alas there is no support for that on the MX. The only thing your/ISP upstream router can do for you is do the NAT of both subnet ranges themselves and translate to a larger private range but translate each IP to another private IP (so no PAT). And then you implement the PAT on the MX as you already are doing.

Alain_Bensimon · ‎Aug 14 2022

The problem got solved by itself, after an hour it started to work. Thank you.

PhilipDAth · ‎Aug 14 2022

No.

TroyV · ‎Aug 12 2022

We ended up finding out the issue. The problem was caused by Chinese Characters in the Log-in Banner. When we removed some special characters the issue went away and users where now able to log into AnyConnect on their Windows devices. Thank you to those that responded. We did test DNS but that didn't resolve the issue, somewhat shocking, because it normally is DNS. I also didn't feel comfortable posting certain logs as they would show critical information. I could have blurred information but knowing my luck it would have been information necessary to troubleshoot. Thanks again everyone!

ww · ‎Aug 11 2022

On layer2 only switches you can assign L2 vlans just to the switch interfaces. In case you want a svi on a L3 capable switch you need to enable the routing https://documentation.meraki.com/MS/Layer_3_Switching/MS_Layer_3_Switching_and_Routing#Initializing_Layer_3_Routing

GIdenJoe · ‎Aug 9 2022

That was the old way of doing things 😉 Usually from the 2504 forward they always used LAG mode since you didn't have to bother with load balancing your interfaces manually. More recent Catalyst controllers usually come with the option to do port-channels on regular ports or smaller port-channel on the high speed interfaces but they do support lacp.

KarstenI · ‎Aug 8 2022

And in addition to the suggested Firewall rules, you need to change from Meraki DHCP to bridged mode to let the clients communicate with each other.

KarstenI · ‎Aug 5 2022

Just some feedback on this. Support was on it for two weeks, but all taken actions didn't help. 2.4 stayed active. Now the support is sure that it is no longer possible. I added a wish to bring back this feature just to be a good RF-citizen.

MFisher · ‎Aug 4 2022

I figured it out, the remote subnets that terminate at the hub were not specified in the "site to site out-bound firewall" rules. Specifying an allow from our AnyConnect subnet to those subnets corrected the issue. I had mistakenly added that same rule under the standard outbound firewall rules.

SteelTown · ‎Aug 4 2022

Well I wish I had more info, but everything is working now. Maybe I just had to wait it out a bit longer for cloud changes to filter. Thank you everyone for the help!

KarstenI · ‎Aug 2 2022

With AnyConnect, the easiest way is to let the RADIUS server return a filter-id that matches a dashboard group-policy.

DanielBHSNIT · ‎Aug 1 2022

I swear this is the neatest **** when it works the way it is supposed to. 😄

BlakeRichardson · ‎Aug 1 2022

@DavidTX Any changes to a wifi profile will cause devices to disconnect, I bet if you manually reconnect the devices they will work as expected. Changing a wifi profile is basically removing and re-adding a profile even if you are only changing a small setting.

About KarstenI

KarstenI

Karsten Iwen

Community Record

Badges