Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About diablo24
diablo24
Building a reputation
Member since Dec 20, 2017
4 weeks ago
Community Record
123
Posts
10
Kudos
3
Solutions
Badges
Apr 13 2020
1:29 PM
@PhilipDAth Sorry that might be my fault. In the link you provided above it says: "NO-NAT is available in the 15.x code, which you can deploy to your device right now via the dashboard." That's the reason why I think I can't do NO-NAT.
... View more
Apr 13 2020
1:14 PM
Maybe that's the problem. I'm running version 14.40.
... View more
Apr 13 2020
1:09 PM
I don't have any NAT configured. I guess I have to open up a support case.
... View more
Apr 13 2020
11:42 AM
Hi, I notice there's an API for getting inbound filters on an MX device: GET 'https://api.meraki.com/api/v0/networks/{networkId}/appliance/firewall/inboundFirewallRules'
Successful HTTP Status: 200
{
"rules": [
{
"comment": "Allow TCP traffic to subnet with HTTP servers.",
"policy": "allow",
"protocol": "tcp",
"destPort": 443,
"destCidr": "192.168.1.0/24",
"srcPort": "Any",
"srcCidr": "Any",
"syslogEnabled": false
}
],
"syslogDefaultRule": true
} However, I can't find where on the dashboard to configure this. There's a Note on the firewall page that says: Inbound rules Inbound traffic will be restricted to the services and forwarding rules configured below. But the forwarding rules does not look like the output above. Is there another section where this is configured? Thanks, -Jerome
... View more
Mar 30 2020
10:40 AM
@MerakiDave Sorry I did not clarify that in my post. And now that I after reading your response I think I know what's going here. I was referring to the APIs that returns VLAN information. In looking at the API call it looks like its only returns VLAN information from the MX devices. So looks looks if your Network is setup for "combination hardware", when my code is processing VLAN information its picking up data about the Firewall VLAN and not VLANs actually configured APs. Can you please verify, can you configure VLANs on the wireless API just like you do on the Firewall? I can't find anyway on the dashboard to do so. Thanks, -Jerome
... View more
Mar 28 2020
12:18 PM
@NolanHerring As far as I know, one customer has the APs directly connected to the firewall. The other has it connected to an MS switch (trunking probably - but not sure). As far as pruning, they did not mention they are pruning.
... View more
Mar 28 2020
12:10 PM
Hello, We have 2 separate customers using the same setup on their wireless APs (MR devices). Basically, one or more SSIDs are configured in bridge mode with VLAN tagging enabled using VLAN IDs from the local connected Firewall (MX device). The issue we are seeing is that one customer has VLAN configs showing up on their wireless APs that are coming from the firewall (VLANs IDs and IPs the same). The other customer does not have these VLAN configs showing up on their wireless APs. Is this due to the way they have their wireless APs connected? If the wireless APs are directly connected to the Firewall, is this when the VLANs are showing up on the APs? Thanks in advance, -Jerome
... View more
Feb 14 2020
8:32 PM
The following API: https://api.meraki.com/api/v0/networks/{networkId}/devices/{serial}/uplink returns: [ { "interface": "WAN 1", "status": "Not connected" }, { "interface": "WAN 2", "status": "Active", "ip": "192.168.110.130", "gateway": "192.168.110.1", "publicIp": "0.0.0.0", "dns": "192.168.110.1", "usingStaticIp": false } ] Why is the publicIp set to 0.0.0.0?
... View more
Labels:
- Labels:
-
Code Sample
Feb 3 2020
8:37 AM
I found that starting in 13.4: In MX 13.4 and higher, fully qualified domain names can be configured in the Destination field.
... View more
Feb 3 2020
7:57 AM
@PhilipDAth Sorry for the delay in my response. I had to debug our customer log and find out which device it was coming from. The API in question is: https://api.meraki.com/api/v0/networks/{networkId}/l3FirewallRules I was just wondering if this was some setting on the device we can turn off? We have our application deployed for a few years now, and this the first time we've run into an issue like this. Thanks, -Jerome
... View more
Jan 29 2020
1:15 PM
This is a general question regarding the return of an API call that returns a domain name instead of an IP address? Could this be a setting on the device? I'm experience this at a customer site and my code is expecting an IP address, instead is getting a domain name (www.yahoo.com). I'm still gathering debug logs, but I wanted to know if this was possible. Thanks in advance, -Jerome
... View more
Labels:
- Labels:
-
Dashboard API
Sep 4 2018
9:39 AM
@MerakiDave- Just following up to see if you found any other info on the hubId. Thanks, -Jerome
... View more
Aug 30 2018
9:24 PM
Thanks @MerakiDave Unfortunately, I don't have a hub to connect to when I place my FW in spoke mode. So I'm unable to see the output.
... View more
Aug 30 2018
10:19 AM
Hi, In the API docs it shows the following: {
"mode": "spoke",
"hubs": [
{
"hubId": "N_4901849",
"useDefaultRoute": true
},
{
"hubId": "N_1892489",
"useDefaultRoute": false
}
],
"subnets": [
{
"localSubnet": "192.168.1.0/24",
"useVpn": true
},
{
"localSubnet": "192.168.128.0/24",
"useVpn": true
}
]
} In the spoke mode you can get which hubs its connected to. Is the "hubId" the networkID of where the hub is located? Or is just a random string that's generated? Also, if the FW is the hub, is there any way to find this ID if its not the networked ID? I'm writing code to stitch up VPN connections and its difficult to associate hub and spoke without some unique identifier. This is what I have when the FW is setup as hub: {
"mode": "hub",
"hubs": [],
"subnets": [
{
"localSubnet": "192.168.128.0/24",
"useVpn": true
},
{
"localSubnet": "137.68.11.0/24",
"useVpn": false
},
{
"localSubnet": "101.11.10.0/24",
"useVpn": true
}
]
}
... View more
Aug 7 2018
10:53 AM
Hi, I'm trying to understand how the MX firewall routes packets in and out of a single interface. I have an MX65 with two WAN links, however, I only have on link configured via DHCP. It has a public IP and is being managed via the dashboard. Now here's my questions: 1. Is it possibly the case that the one interface with IP is really only for management, but that the real firewall policy is between two L2 interfaces? 2. Does the device have one IP’d interface, and another interface with no IP? Or does it really only have the one interface, traffic comes in, and if it passes, it goes back exactly where it came from? 3. Does the MX have any other rules/constraints about surrounding network, like “there must be two connected routers”? 4. If you send traffic to a device with one interface, let it filter/route, then let it send the traffic back out the SAME interface, then the next device along the path is likely to reject the traffic as a loop!?
... View more
Jul 19 2018
1:55 PM
Hello, I just realized that the dashboard APIs to get VLAN information uses network_id to get the data. Is there a way to tell which device actually has these VLANs configured? What if that network has 1000 MX devices on it with VLANs configured. How do would I know which VLANs below to which device? Thanks in advance, -Jerome
... View more
Jul 2 2018
2:30 PM
The reason I ask is that when i do an 'nslookup' I get the following: JJabson-mac:~ jjabson$ nslookup on dashboard.meraki.com
;; connection timed out; no servers could be reached
JJabson-mac:~ jjabson$ nslookup api.meraki.com
Server: 10.64.81.5
Address: 10.64.81.5#53
Non-authoritative answer:
api.meraki.com canonical name = na.api.meraki.com.
na.api.meraki.com canonical name = n6.meraki.com.
n6.meraki.com canonical name = sdg339.meraki.com.
Name: sdg339.meraki.com
Address: 64.156.192.232
... View more
Jul 2 2018
1:48 PM
Hi, Is there a difference between using api.meraki.com vs dashboard.meraki.com when calling APIs? Thanks in advance, -Jerome
... View more
Jul 2 2018
11:52 AM
Thanks @AjitKumar. Yes I've read all this. The reason I ask this question is I'm doing some apps using the API and I was looking for a way to determine what mode the FW as in, since there are no API that return that.
... View more
Jul 2 2018
10:49 AM
Hi, If an MX is in L2/Passthrough mode, the WAN1 link is still configured with an IP for mgmt, correct? How does it act in this mode if there's an IP on an interface? Thanks in advance, -Jerome
... View more
Jul 2 2018
9:56 AM
Thanks @Adam for clarifying. The documentation is a bit sparse when it comes to details about the functionality. Its difficult to understand.
... View more
Jul 2 2018
9:25 AM
Hi, I'm trying to understand what this mean "Inbound traffic will be restricted to the service and forwarding rules configured below.” when configuring firewall rules on an MX device? Does this mean that rules are automatically created when an inbound session is created? The service section in Firewall doesn't seem easy to configure or add something besides Ping which is already there. Additionally, if I configured something in the forwarding section (i.e. port forwarding), does this only take effect during an inbound session? Thanks in advance, -Jerome
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 1600 | Feb 3 2020 8:37 AM | |
| 4746 | Feb 13 2018 1:18 PM | |
| 3799 | Dec 21 2017 9:18 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 630 | |
| 1 | 572 | |
| 1 | 4862 | |
| 1 | 4253 | |
| 1 | 2450 |
© 2024 Cisco Systems, Inc.
