Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About hmc250000
Community Record
85
Posts
8
Kudos
0
Solutions
Badges
Jul 14 2021
9:30 PM
When setting up a site to site VPN with overlapping subnets can you NAT the an internal subnet to the outside interface (or a single public ip address) of the MX appliance on both sides of the VPN (other side is a non Meraki peer)? Like PAT overloading or many to 1 Natting. Is this possible? 192.168.1.0/24 > NAT to outside interface 1.1.1.1 ----Internet-----NAT to outside interface 2.2.2.2 < 192.168.1.0/24
... View more
Jun 23 2021
12:23 PM
When I look on google and CDW I see MS120-48 is not POE but the MS225-48 is.
... View more
Apr 30 2021
1:56 PM
1 Kudo
Interesting. We are a midsized company and sometimes require not so simple solutions to make things work globally. Thanks.
... View more
Apr 30 2021
12:01 PM
Is it possible to configure a DHCP relay (server resides on the inside LAN) for VPN clients?
... View more
Apr 30 2021
11:25 AM
Simple question. Can you use a subnet for VPN clients that is also used on the LAN interface of the MX? So you are basically bridging and not routing. between VPN clients and the inside LAN. This was possible with Cisco ASA's. I want to avoid having to waste an entire subnet. Thanks.
... View more
Apr 22 2021
10:45 AM
Yes, it is working fine on the sonicwall however. And fyi it is because of the limitations of the site to site VPNs between Meraki and non Meraki peers that we still have the sonicwall on our network. Aren't the Meraki MX's doing stateful inspection? I believe that keeps track of incoming and outgoing sessions something like that.
... View more
Apr 16 2021
10:39 AM
Sorry no, not one behind the other. They are parallel to each other. I'm not saying port forwarding does not work on Meraki however in this scenario could there be any issues?
... View more
Apr 15 2021
8:39 PM
We have 2 firewalls (1 sonicwall and 1 MX Meraki) and we have tried configuring port forwarding rules for some of our web servers on each firewalls. However the port forwarding rules on the Meraki MX do not work but they do work on the sonicwall. I'm wondering how will the traffic know to which firewall to go to get to the destination web server? https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Port_Forwarding_and_NAT_Rules_on_the_MX
... View more
Apr 14 2021
2:57 PM
We have overlapping ip ranges for a site to site VPN with an external partner. And by the way I do not see the option to enable VPN subnet translation (only VPN on or VPN off). However AutoVPN is already enabled.
... View more
Apr 14 2021
1:44 PM
I see this "This feature is only supported for Auto VPN and is not intended to work with non-Meraki VPN peers." So it will not work for a site to site vpn between a meraki and non meraki peer? That sucks if that's the case.
... View more
Apr 14 2021
9:35 AM
Is it possible to configure port address translation for incoming traffic from a site to site VPN? I would like incoming traffic from the peer site to translate to the inside LAN interface of the Meraki MX.
... View more
Apr 1 2021
9:11 AM
Would it make sense to have a backup hub (for traffic between the autovpn mesh and DMVPN) in the above scenario?
... View more
Mar 18 2021
11:35 AM
Are there any benefits to using 10gbps ports if the link with the ISP is 1gbps? On the LAN side we have switches that support both 10gbps and 1gbps.
... View more
Mar 9 2021
8:03 AM
1 Kudo
Thank you!. Now I get it. LAN interfaces only have a single IP address that is configured on the primary MX. This IP address is passed to the standby MX when failover occurs (so you only need one IP address on the LAN for two MXs)
... View more
Mar 8 2021
2:54 PM
Sorry I'm still confused. Are both MX's (active and passive) not supposed to have unique ip addresses for the LAN? We use static routes on our L3 switch. Which article is more up to date? this https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair or this? https://www.willette.works/mx-warm-spare/
... View more
Mar 8 2021
2:23 PM
If we want to configure virtual ip address for HA do we configure it on both the WAN interfaces and LAN interfaces of each MX or only the WAN interface? I'm looking at this configuration document and only see steps to configure a virtual ip address for the WAN interface. https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair - How would this work for the LAN? We have a default route configured on the local L3 switch and do not want to have to change that each time a failover occurs. - And can we use private ip addresses for the virtual ip addresses? Thanks.
... View more
Feb 20 2021
9:35 AM
Does it make sense to have regional hubs in the above design? For example if you have 2 branch offices in Asia and you have to send traffic between the branch offices would traffic have to traverse through the head office or can I assume traffic will go through the nearest hub to get to the other branch office? Or there any advantages or disadvantages to having more hubs.
... View more
Feb 16 2021
10:35 AM
Can you setup a site to site VPN between a non meraki peer and a spoke (as opposed to a hub)? And if you do not want to have a peer connection from the external non meraki peer to every peer in the AUTOVPN organization is there a way you can allow the sites in your organization to route to this non meraki external peer?
... View more
Feb 14 2021
5:13 PM
A few more questions: - We have MPLS and DMVPN in every site (with Cisco equipment). We have HSRP configured in each site to make the DMVPN network the primary WAN link and MPLS the backup. How do we setup something similar with the Meraki AutoVPN as primary and the MPLS or DMVPN network as backup? Can you configure HSRP, GLBP or VRRP between the Meraki MX's and a Cisco router? - If we want to use a dynamic protocol which protocol would be recommended? I've read that BGP has been tested much longer than OSPF for AUTOVPN. Would that work to share routes with neighbors (MPLS or DMVPN) on the LAN side too? - Can you setup a site to site VPN between an external non meraki peer and one of the spoke site in the AUTOVPN mesh and advertise the external routes in the AUTOVPN mesh?
... View more
Feb 12 2021
7:21 AM
Would this global Meraki AutoVPN design work? The hub site US1 (2MXs HA in routed mode) is bridged to a DMVPN and MPLS network on the LAN side through static routes. Summary routes are injected on the routers in the hub (US1) and advertised from there. 1 DMVPN hub (US1) 1 MPLS hub (US1) 4 Meraki AutoVPN hubs 40 Spoke sites across the globe Subnets: US1 172.16.1.0/24 (summary route 172.16.0.0/16 advertised) US2 172.16.2.0/24 US3 172.16.3.0/24 US4 172.16.4.0/24 Europe1 172.16.100.0/24 Europe2 172.16.101.0/24 Europe3 172.16.102.0/24 Europe4 172.16.103.0/24
... View more
Feb 10 2021
8:11 PM
We have an existing DMVPN and the routers are all Cisco. I know the MX's do not support DMVPN but I was merely trying to make it clear that the MX's in the hub site will be the gateway to the DMVPN network from the Auto VPN mesh through a static route on the internal vlan interface of the MX's. So can the MX's in the hub site be configured in routed mode in this scenario?
... View more
Feb 10 2021
11:12 AM
Can you Bridge AutoVPN with Cisco DMVPN with the MX at the hub in routed mode (with static routes and about 40 spokes)? We intend to have 2 MX's for HA at the hub site that will bridge to the DMVPN.
... View more
Feb 5 2021
8:20 AM
Just found this Routed Mode and AutoVPN You can only advertise the same subnet from more than one appliance if all appliances advertising that subnet are in Passthrough or VPN Concentrator mode. All subnets advertised from an appliance in Routed mode must be unique within the AutoVPN topology. https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior
... View more
Feb 3 2021
3:32 PM
Good info. In the mesh can you have one route advertised by 2 or multiple hubs? For instance I would like to advertise a summary route 172.16.0.0/16 on at least two of our hubs. I've tried this but get an error.
... View more
Feb 3 2021
3:08 PM
Ok. So all the sites in an organization that participate in site to site VPNs will join the mesh. We intend to have a small number of regional hubs. IS it possible to have some of the MX's in spoke sites not join this mesh and just have a single site to site connection to one hub?
... View more
- « Previous
- Next »
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 3 | 1627 | |
| 1 | 17965 | |
| 1 | 17979 | |
| 1 | 17995 | |
| 1 | 3998 |
© 2025 Cisco Systems, Inc.
