About PhilipDAth

PhilipDAth · ‎03-20-2020

Check out @Nash VPN scripts for split tunnelling. https://github.com/gammacapricorni/happy-meraki-client-vpn You can do any kind of routing via ports with the Windows client VPN. Windows doesn't support that.

PhilipDAth · ‎03-20-2020

I'd use a third party commercial splash page service like Splash Access. https://www.splashaccess.com/

PhilipDAth · ‎03-20-2020

This is most likely to be a Windows Firewall issue on the server.

PhilipDAth · ‎03-20-2020

You can check the VPN registry status in: Security & SD-WAN/VPN Status

PhilipDAth · ‎03-20-2020

If they are operating in warm spare mode, then they will look like a single site to the reset of the AutoVPN network. It the primary site goes down the warm spare will take over as active. The remaining AutoVPN sites wont see a change routing wise.

PhilipDAth · ‎03-20-2020

From what I can see - it will remain connected. If one DC goes down that only leaves the remaining MX up and the remaining router connecting to AWS up.

PhilipDAth · ‎03-20-2020

Does the MX84 show it is registered with the VPN registry correctly?

PhilipDAth · ‎03-20-2020

I assume the two sites have a layer 2 link between them since you are using the same subnet at both sites? If so, just make the second MX a warm spare. https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair Otherwise this config makes no sense. How could the system possibly now which site to route the DC subnet to.

PhilipDAth · ‎03-19-2020

If you have no other VPNs of any kind, then you should be able to do this by including just the VLAN that has the source traffic (and it will need to be dedicated for this) and specifying a remote encryption domain of 0.0.0.0/0.

PhilipDAth · ‎03-19-2020

I'm thinking you'll need to pull the event log for each store, and look for up/down events.

PhilipDAth · ‎03-19-2020

You must have logging enabled somewhere. Turn it off. Look around the Meraki SDK init.

PhilipDAth · ‎03-19-2020

I'm going to guess you are using the Windows GUI to connect the VPN - and that is flaky. Try Start/Run/rasphone. It works much much better.

PhilipDAth · ‎03-19-2020

I've got clients auto-deploying the VPN using group policy in Active Directory. Just create a group policy that runs a powershell script and put it in the scope of a group that you want to auto-deploy the settings to. Then never touch it again.

PhilipDAth · ‎03-19-2020

You might need to give a specific example. Here is an example of one API call and it lets you update lots of things at once. https://dashboard.meraki.com/api_docs/v0#update-the-attributes-of-a-device Does it really make that much difference making muliple API calls?

PhilipDAth · ‎03-19-2020

Check out some of these solutions. https://developer.cisco.com/meraki/explore/#tech=Location%20API

PhilipDAth · ‎03-17-2020

I haven't seen any documentation covering the BGP path selection process.

PhilipDAth · ‎03-17-2020

> What is the cost of the running VMx in Azure? Is it cost effective. It is when you have lots of sites. Not so much when you only have a couple., > How is the internet security handled if we are using the internet link from Microsoft. It runs as a VPN concentrator only. It does not provide firewall, content filtering, IPS or other security functions. > What is the best approach for HA in Azure. I haven't seen any options for doing HA in Azure with a VMX.

PhilipDAth · ‎03-16-2020

All the PoE models needs a 54V supply. All the non PoE models use a 12V supply. Examples are MX64 and MX67. I've used the MX64W of a 12V supply in a marine application.

PhilipDAth · ‎03-16-2020

None.

PhilipDAth · ‎03-16-2020

The easy option is to just copy the network before making a change. You can make as many copies as you like. Otherwise you can try my offline backup tool. https://www.ifm.net.nz/cookbooks/meraki-backup.html

PhilipDAth · ‎03-16-2020

The RF uses a wave length around 122mm. You want to avoid mesh that uses a multiple of a 1/4 wave length. So mesh where the wires were about 31mm, 61mm, 92mm or 122mm apart would be bad. So using a mesh with a spacing of 45mm, 75mm or 105mm should be ok. Also the signal drops off exponentially. So if you could stand the mesh off the AP (say) 100mm that would be good. Personally - I think I would go for a simple toughened ABS plastic case, like an electrical switchboard case.

PhilipDAth · ‎03-16-2020

If I recall correctly, the MG21 has two Ethernet ports. You can configure one for data and the other for PoE only. If you configured the port for PoE only you could plug it into an PoE port on an MX. A power injector does seem rather simple though ...

PhilipDAth · ‎03-16-2020

I've never seen such a document.

PhilipDAth · ‎03-16-2020

> What is the recommended approach for people who wish to setup VPN connections from a meraki device (in-office) to non-meraki devices (at home). Don't go there. It will chew up huge amounts of time, a lot of them will probably have bugs, and you'll probably get a whole bunch that don't work. Either use client VPN or the Z3's.

PhilipDAth · ‎03-16-2020

The client ID is related to the username. It is always the same no matter what device the user is using.

PhilipDAth

Community Record

Badges