So they pronounce it correctly then. Didn't expect that :P. ... View more

Welcome to the community Soeren! How do the English pronounce your name? Like in toe? ... View more

The purpose of port forwarding is different. It's meant to be used for traffic coming in to the MX's WAN interface.   Let's say for example you have a webserver running in your local network on port 80 on a server with the local IP address of 192.168.50.1. You would then setup port forwarding like this:   It doesn't work like that for outgoing traffic.   You could configure the firewall to only allow DNS traffic to your DNS server and block everything else. Then your users would be obliged to use your DNS server (unless they proxy/VPN their way out).   ... View more

Yeah definitely postman and then python.   Have a look at this write-up I made not so long ago: https://community.meraki.com/t5/Introduce-Yourself/Hullo/m-p/87641/highlight/true#M700 ... View more

The only way you can do this is with umbrella integration. But you can't use your own DNS server.   Afaik there's no way to do this and specify your own custom DNS server. ... View more

Well done all! Impressive results. ... View more

I fold   ... View more

Hmm I'm getting a different SHA1 for it: aa8b0a5bf46d075c2f85bd54addc1a7af34fd240   So I wonder if yours got tampered with. ... View more

Top 10% may be confusing here. It's the 10% highest, i.e. worst latencies. You can also look at it like this: how high do I need to set the latency bar to catch 90% of the results. 90% of the actual latencies will be at or better than the value shown in that 90% graph. 50% of the actual latencies will be at or better than the value shown in that 50% graph.   It therefore also makes sense that the value shown for 90th will be a worse latency i.e. a higher value than the 50th percentile.   Agreed @Network-dad ? ... View more

I agree, whitelisting IPs would be very insecure. ... View more

For the normal IPsec VPNs you'd need to use some kind of DynDNS but the good news is that Meraki MX's automatically have a build-in DynDNS service. You don't need any external services for that: https://documentation.meraki.com/MX/Other_Topics/Dynamic_DNS_(DDNS)#Enabling_Dynamic_DNS   But AutoVPN would be easier if you're building tunnels between MX's in the same organization.   Edit: I forgot you can't use FQDN when configuring IPsec Site-to-Site VPN in MX's. ... View more

That's a nice ambition, and I'm sure you'll get there. Play around in the dashboard if you have the chance, and you'll get the hang of it quickly.   How crazy are you? Sprint triathlon, standard, half-ironman or ironman? ... View more

We're good at solving issues, and sharing good practices. Don't know if many of us are good at haircuts though, so maybe don't trust any advice given on here regarding that.   Welcome to the community! ... View more

Welcome to the community Jason! We'll be there when you need us ;). ... View more

Welcome to the community Louis. You'll get the hang of it quickly with the lab! ... View more

Welcome Troy! ... View more

Welcome to the community Priyankara! ... View more

Yup   WIPS aka Air Marshal: yes IPS as in Snort: no, you need an MX with an advanced license for that ... View more

When you click on it you should get more details:   But what exactly it is, you'll have to figure out yourself by either packet capturing or talking to the person, I think. It's just something Meraki doesn't know how to categorize. ... View more

I have no idea what that refers to. It may be referring to the distinction between a One-armed concentrator and a NAT-mode concentrator. Only the second one can do SD-WAN (for the subnets on the LAN-side). ... View more

Couple of things: Make sure the configured bandwidth corresponds to the uplink. In other words based on what you say you configured, make sure that the MPLS connection is indeed connected to WAN 2 and the slower connection to WAN 1. Might also want to make the MPLS connection the primary one. Also activate load balancing (unless you specifically want to reserve the MPLS for certain applications). Perhaps you could also lower the list update interval, but I don't think that that will have much impact. Play around with the per-client bandwidth limit to make sure it's not just a single user hogging up all bandwidth. And lastly, you may want to take a look into trafic shaping, because your links are not fast, so you would benefit a lot from it. At least try the default shaping rules. ... View more

I'd say it's usually the consequence of the requirements of the deployment. When there already is a firewall/or NAT device in place you usually deploy an MX just as concentrator. Usually this is in central datacenters where MX isn't always feature rich enough for all security requirements or where a client may not want to touch that part of the setup and just "bolt on" the AutoVPN for branches. ... View more

What a coincidence, I just talked about these yesterday! ... View more

You have eSports teams, that's cool!   Very well done man. I very much appreciate the message you're sending about getting places even if you haven't necessarily got an IT degree. ... View more

Congratz all! ... View more