Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About SimonReach
Community Record
72
Posts
16
Kudos
1
Solution
Badges
Jun 13 2023
4:08 AM
Are we able to resort to SNORT 2.9 when we upgrade or is this something that Meraki support need to do?
... View more
May 22 2023
5:49 AM
We're having the exact same issue with our main site that has 2x MX100s, 1 being a hot spare. Runs absolutely fine on 16.16.8, upgrading it to any of the 17.x patches or even the latest 18.107.1 patch causes a lot of speed issues and connectivity issues, websites not loading first time round, things getting blocked with no logs informing us that it's getting blocked at all.
... View more
Mar 16 2023
6:53 AM
Just in addition to the internet issues we're having. Since Monday, we did the upgrades on 2 of our sites which connect via SDWAN to each other over the weekend, we've also had multiple issues with people getting corrupted Excel files and connectivity to external servers and ftp sites has also been affected. Last time we attempted to upgrade to version 17.x a month ago, we had major issues with the VPN so something isn't right with the 17.x updates in regards to our systems. The VPN issue we had was that the client vpn lost it's DNS name, luckily we had another dns name registered with our DNS supplier that worked fine still but still had to get every vpn client moved over.
... View more
Mar 16 2023
3:08 AM
Turned off all security and left it for 5 minutes, turned on the most important bits again and just giving it a try, will turn on the rest later when we know if there's been any difference. Thank you edit: No difference at all, we're rolling back to 16.16.8 tonight.
... View more
Mar 16 2023
2:20 AM
Upgraded to 17.10.2 on Friday morning and had people reporting slow and problematic internet since Monday, upgraded to 17.10.4 this morning and people are still reporting the issues. Internet loading slowly on some pages and other pages time out first time and then work fine after a quick refresh. We've got MX100s onsite and use AMP and the Intrusion Detection and Prevention in Prevention mode and Ruleset of Security. We also use url filtering and category blocking as well. Might look at seeing if we can roll back to 16.x tonight if no one else has any ideas?
... View more
Feb 3 2023
7:13 AM
We've got multiple sites all running MXs and connected via SDWAN. Is it possible to set a NAT rule for one of our sites to an ip address at another site, at the minute i'm getting the below error: There were errors in saving this configuration: Invalid 1:1 NAT: The IP address 10.14.110.15 is not on a configured subnet. The MX100 at site 1 can ping the internal ip address at site 2, but can't get the NAT to work.
... View more
Labels:
- Labels:
-
Firewall
Aug 10 2022
5:20 AM
We're also having issues with Windows Update and our Dell Command Update application as well.
... View more
Aug 10 2022
4:43 AM
As an option, not one we'd take at the moment, but will turning off the Intrusion Detection and Prevention resolve the issue? Anyone tried?
... View more
Aug 10 2022
4:10 AM
All of our VPN users, using the client VPN, are having the issues in the UK but onsite people connecting through the MX100s are fine.
... View more
Jul 19 2022
3:55 AM
Wonderful, so deleting the stack, which now only contains the 1 switch that's still plugged in, won't cause any connectivity or configuration issues?
... View more
Jul 19 2022
3:24 AM
Hi everyone, Hopefully a very quick question. We've got 2 switches working on our network and we need to move the switch to another network, which is no drama. We've removed the switch from the physical stack but is it as simple as deleting the stack on the dashboard, will that remove any of the configuration on the remaining switch?
... View more
Labels:
- Labels:
-
Other
Feb 23 2022
7:30 AM
With step 2, is there anyway to automate making that change across multiple laptops? A powershell or cmd script?
... View more
Jul 5 2021
3:17 AM
There are quite a few 'VPN Tunnel connectivity change' events that happened on Friday afternoon at 12:56pm. Lots of 'connectivity false' and then 'connectivity true' for the different sites, apart from the main site 1, that didn't come up until the restart this morning. All site are reporting fine now in the VPN Status.
... View more
Jul 5 2021
1:42 AM
We're slowly moving all of our sites over to MX boxes and SDWAN, away from the much more expensive MPLS network, and we had a slight issue this morning with one of the sites. We've got around 5 sites on the Site to Site VPN, configured as Hub, and there was a loss of connectivity between 2 of those sites? As an example, site 1 and site 2 lost connection with each other but site 1 could talk to site 3, 4, and 5, site 2 could also talk to site 3, 4, and 5. To resolve the issue, we rebooted the MX at site 2. Any idea why this happened?
... View more
Nov 19 2019
2:08 AM
Bugger, thank you. Presume Meraki are no closer to getting this implemented at all on the L3 Switches? It's not desperate to happen but it would definitely have been nice.
... View more
Nov 19 2019
1:45 AM
On site, i've got an MX100 > MS250 > MS210 Access switches. We have 2 gateways out of the site, one through an MPLS link which connects to the MS250 and one through the MX100 that goes out to the internet. All of the VLANs currently have a default route pointing to the MX100 to send internet traffic out and then static routes on the L3 switches that route traffic to anything on the other side of the MPLS link through the MPLS router. What i'd like to do is set a VLAN up where the default route, meaning any external traffic, goes out through the MPLS router and not the MX100. I know this can be done on a Cisco switch but can't figure out how to do it on the Meraki MS250s. Anyone have any ideas? This is essentially what i'd like to do - https://community.cisco.com/t5/switching/how-to-redirect-traffic-from-a-vlan/td-p/3055580
... View more
Oct 17 2019
6:31 AM
It's a dashboard that's configured with 2 networks, one has already been setup and is fully operational and the other is yet to be upgraded to Meraki and this is at another site. The 2 sites are currently connected together through MPLS but both sites use their own internet connection. I've spoken to Meraki support who have enabled the Meraki Identifier which they've told me will help as i've got an MX that connects to layer 3 Meraki switches and then users connect to the MS210 stack which plugs into the layer 3 MS250 switches.
... View more
Oct 17 2019
1:27 AM
Hi Nash, What we've essentially done lastnight and this morning is change the Meraki filtering to the big things, we've got Kaspersky to restrict stuff like Facebook access, so we're now only blocking Adult & Pornography, Bot Nets, Confirmed SPAM sources, Hacking, Illegal, Keyloggers and Monitoring, Malware Sites, Open HTTP Proxies, Pay to Surf, Peer to Peer, Phishing and Other Frauds, SPAM Urls, Spyware and Adware, and Unconfirmed SPAM sources. Our network is an MX100 > a stack of 2xMS250s (this has all the layer 3 and OSPF stuff on) > stack of 4xMS210s which is where the clients are plugged into. edit: I've had a quick read through of the Client Tracking Options document, the only options i have for Client Tracking under 'Security and SDWAN' > Configure > Addressing & VLANs is MAC Address (what it's set to now) and IP address which is greyed out.
... View more
Oct 16 2019
8:23 AM
Thank you, we've removed some of the tamer categories, we also use Kaspersky Endpoint which does webfiltering as well, so will see how it goes. It does seem to be the first time that someone goes to a certain website, it causes the delay but any further visits to the site are fine. Also, is there a way to trace the 'Content Filtering Blocked URL' back to a particular user or machine rather than just the mac address of a Meraki device?
... View more
Oct 16 2019
7:07 AM
Abortion, Abused Drugs, Adult and Pornography, Alcohol and Tobacco, Bot Nets, Cheating (Academic), Confirmed SPAM sources, Cult and Occult, Dating, Games, Hacking, Hate and Racism, Illegal, Keyloggers and monitoring, Malware Sites, Marijuana, Nudity, Online Greeting Cards, Open HTTP Proxies, Pay to Surf, Peer to Peer, Phishing and Other Frauds, SPAM Urls, Shareware and Freeware, Spyware and Adware, Streaming Media, Swimsuits and Intimate Apparel, Unconfirmed SPAM Sources, Violence and Weapons.
... View more
Oct 16 2019
7:03 AM
Since we replaced our ASA on saturday with an MX100, we've had a lot of issues and complaints about internet connectivity being slow and unreliable. As an example, someone would click a link to an article in the Guardian newspaper, it would spent 5-10 seconds thinking about it, flash up with an error saying the page can not be loaded and then the page would immediately pop up. We can't see anything in the event logs that might be causing it but we do get a lot of urls blocked regarding spotify and something called offers-api-ghostery.net. The event log also doesn't allow us to pinpoint exactly which machine tried to access the blocked content. AMX is enabled, content filtering is turned on and the IDP is enabled as well with the ruleset set to Security.
... View more
Oct 8 2019
3:13 AM
Hello, thank you for the reply. OSPF was all enabled but we got the ISP, who looks after the MPLS router and network, to log in as we were doing some testing. The VPN static route that the MS250s were presenting to the MPLS router through OSPF was being seen as an OSPF External network which was being blocked, so essentially the ISP engineer just had to tick a tickbox to allow external networks and it all started working.
... View more
Oct 7 2019
2:29 AM
Quick and simple question hopefully. We're configuring an MX100+MS250s at our head office, we also have an MPLS connection that's plugged into the MS250 which gives the Meraki network access to all of our other offices the other side of the MPLS router. This has all been tested and works fine so any device plugged into the Meraki network can connect to the internet, through the MX, and to the MPLS network. However, any devices connecting to the client VPN can't see the other side of the MPLS, only vlans within the Meraki network. We've got a client VPN setup on the MX100, we've got a static route setup in OSPF config for the Client VPN on the MS250 that points it at the MX ip address but do we also need the client VPN vlan setting up in OSPF as an interface as well?
... View more
Mar 26 2019
3:30 AM
Thank you. I'm hoping the plan is to get some of the smaller MX devices at the branch offices as then it'll give us much more visibility in regards to data traffic between sites and any devices that might be flooding the MPLS links, this is something we don't have now as we do sometimes have issues of "over-utilisation" with a couple of devices at our branches with the more basic WAN connections, we have several that struggle to get 2Mb.
... View more
- « Previous
-
- 1
- 2
- Next »
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 250 | a month ago |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 4 | 267 | |
| 2 | 129 | |
| 2 | 368 | |
| 2 | 380 | |
| 1 | 945 |
© 2024 Cisco Systems, Inc.
