Meraki

Johnfnadez · ‎May 4 2020

I think that your best way is checking the capalibities and choose the right MX. https://meraki.cisco.com/lib/pdf/meraki_datasheet_mx.pdf

Johnfnadez · ‎Apr 30 2020

Hi Merakiers!! I`ve been trying to block intervlan routing in my outbound firewall rules, but if i perform a ping from my computer in 192.168.22.0/24 to 172.16.101.0/24 but ping suceed.

Johnfnadez · ‎Apr 28 2020

Completed! 😎

Johnfnadez · ‎Apr 28 2020

The shipping address will be the same that I have in my Cisco account? 😄

Johnfnadez · ‎Apr 27 2020

Omg I won!!!!😆

Johnfnadez · ‎Apr 27 2020

When will the winners be announced? 😃

Johnfnadez · ‎Apr 24 2020

Nice!! It`s the only thing that I have to say! 😄

Johnfnadez · ‎Apr 24 2020

Genial! Saludos a @FelipePerrone quien me instruyó en mi CMNA!

Johnfnadez · ‎Apr 20 2020

Hi @PhilipDAth I been working with Meraki Support and We can confirm tht there`s two-way traffic and that we have all the Firewall Rules in my upstream firewall. But when we started to deploy meraki branches (1 year ago till now) I have been registering MR,MX and MX in each brach without problems. But we are a Financial Institution and we have to be aware about our firewall rules. And we deployed more than 100 branches with the NTP bloking in our Upstream Firewall. But now this is the issue bc MS cannot connect to the principal cluster in USA. So it tries to establish the M-Tunnel against the secondary cluster and to acompplish this M-tunnel needs NTP and It`s the port that we have deny in our firewall.... The issue now is that we cannot perform a rule to permit NTP with any any entries bc We are a bank. So we will try to modify our DNS entries to simulate a DNS Poisoning to resolve an internal NTP to the domain that MS tries to resolve the URL that uses to get NTP services....

Johnfnadez · ‎Apr 15 2020

Yes actually I have been trying for hours.

Johnfnadez · ‎Apr 15 2020

Hi, I been having some issues to connect some MSs to the cloud. Yesterday I tried to connect the MS in a remote branch and It is not registering. We have a lot of Meraki Devices (hundreds) that pass through a PAN Firewall. There, we have all the rules that I need to use Meraki without issues. I been performing some tests like: Put static vlan and IP in the local page. Packet captures in the MX concetrator. An I´m seeing bidirectional comunication between my MS and the Meraki Cloud. But I am not seeing my device UP. Regards

Johnfnadez · ‎Apr 3 2020

And also check your threat protection config. Regards!

Johnfnadez · ‎Apr 3 2020

Yes! Look my MX 🙂 Try to check you Policies in your group policies that you have assigned in your device or VLANs

Johnfnadez · ‎Apr 3 2020

You could perform a test entering to notepad.pw MX will remark the Domain as DNS Malicious query. Its a fact but is a simple test just to know that MX is doing his job.

Johnfnadez · ‎Apr 1 2020

ust be aware what kind of traffic u will send over one default route to MX1 and MX2, maybe would it be a policy route in your L3 device that interconects both MXs

Johnfnadez · ‎Apr 1 2020

Will u use both MX as active-active right? I should work fine! if the both are in active active.

Johnfnadez · ‎Mar 31 2020

You will need the same MX model (MUST)

Johnfnadez · ‎Mar 31 2020

Hi, I have Meraki Spokes against my Meraki Hubs, I have been performing some rules that I need to cofigure for security reasons. So my customer is asking me how a technical guy can realize If the meraki VPN firewall is blocking the traffic or if the traffic is being bloked in othe side (they have Palo Alto firewalls in other network sites). I think that the best option is performing a traceroute to verify where it is beeing blocked. Bc I have seen that unlike the web filtering that shows a warning splash page saying that the traffic was bloked, those rules doesn´t show that warning. And obviously that users are not only consulting HTTP services they uses FTP or SFTP. Does anyone has an idea? I think that the best option is Traceroute. Regards,

Johnfnadez · ‎Mar 25 2020

The lastest stable

Johnfnadez · ‎Mar 25 2020

Yes but in this option I just configure L3 rules to prefer the outbound traffic flow. Regards

Johnfnadez · ‎Mar 25 2020

Mmm I don´t think so, bc I have customers with just one MX and one branch and they have this option. Regards

Johnfnadez · ‎Mar 24 2020

Hi I have a MX64 and I wanted no configure SD WAN policies but it does not appear 😞 Does anyone know what happen?

Johnfnadez · ‎Mar 20 2020

Hi, Merakineers! I have a huge Meraki Network, wich works in Hub and Spoke through MPLS so, I installed a SIEM to receive logs from all remote sites. But now I´m getting those logs tagged as "URL-UNKNOWN" but I don´t know what it means specifically. Every IP that u see there is one Gateway from one of the VLANs that I´ve got in the spoke MX. At the beggining I thought that It was URLs that maybe wouldn´t be categorized by the web filtering, but I´ve go those specific logs where I see a "play.google.com" which is a google URL I found it out in Talos and is recognize as google´s URLs. Best regards,

Johnfnadez · ‎Mar 11 2020

We did our best effort! 🙂 Before: After:

Johnfnadez · ‎Feb 17 2020

I have 21 Vlans in my MX and each one is for an SSID just 6 not. I´m having issues with the DHCP Leases in the last vlan that I configured. Does anyone know if Meraki has a limitation for that or a best practices for the VLANs specifically. Regards

About Johnfnadez

Johnfnadez

Community Record

Badges