Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Happiman
Community Record
97
Posts
14
Kudos
2
Solutions
Badges
May 21 2019
12:20 PM
I found the flow prioritization is ineffective or not working when I wanted to fix the VoIP call quality. You will have to limit other traffic flows under certain % of your given bandwidth from ISP
... View more
May 21 2019
12:14 PM
I found a couple of links to identify the public subnets but there are two many. You can download the list of subnets from here . https://www.microsoft.com/en-us/download/details.aspx?id=53602 And these people were trying to identify the actual subnets that belong to the windows updates. https://social.technet.microsoft.com/Forums/windows/en-US/b596aa81-2775-496c-b159-dcfc5c5bf22d/windows-update-ip-addresses-range-and-subnet-mask-for-windows-server-2008?forum=winserversecurity So I'm thinking these are the subnets for the window updates. 65.52.0.0/14 70.37.0.0/17 70.37.128.0/18 94.245.64.0/18 111.221.16.0/20 111.221.64.0/18 132.245.0.0/16 157.54.0.0/15 157.56.0.0/14 157.60.0.0/16 207.46.0.0/16 207.68.128.0/18 213.199.128.0/18
... View more
May 21 2019
11:41 AM
I don't have a L2L vpn between fortigate and meraki but I do have fortigate for my edge firewall. could you share your debug on VPN? diagnose debug app ike 255
diagnose debug enable https://cookbook.fortinet.com/ipsec-vpn-troubleshooting/
... View more
Apr 18 2019
2:02 PM
I am using CradlePoint as a backup on WAN2, then use WAN1 as a primary w/o load-balancing.
... View more
Apr 18 2019
1:57 PM
To make this one happen, you will have to use your Meraki as a VPN concentration mode so that your L3 switch forms an OSPF neighbor. At the same time, you will need to run OSPF on EVPL. Between two source of routes, you can influence the preference with cost/metric.
... View more
Apr 18 2019
1:36 PM
If you have many subnets to advertise from your data center, one arm concentrator mode is useful. After all, you will run OSFP and form neighbors between MX and your edge firewall.
... View more
Apr 18 2019
1:10 PM
Meraki MX won't accept a port channel link aggregation.
... View more
Mar 5 2019
11:00 AM
I'm not 100% sure, but I think i won't work. Meraki has its own product line.
... View more
Mar 5 2019
10:56 AM
You will have to remove the broken MX from the network first. Configure the WAN IP address on the new MX Plug the cables. That's it.
... View more
Mar 5 2019
10:53 AM
I'm trying to use L3 ports on my downstream switch to connect MX100 HA. I was able to use L3 port on my down stream port when I had a single MX to connect. I understand that Meraki does not support LACP bonding. Will that also apply to L3 Port-Channel Interface on the downstream switch?
... View more
Mar 5 2019
9:47 AM
Ports on the Fortigate are L3 and Cisco 4507E has L2 & SVI. Since there are L3 ports between MX and Cisco Switch Loop will not happen?
... View more
Mar 4 2019
4:18 PM
Testing Phase Three-way Connection I need to migrate a traffic path which is going through Fortinet firewall device right now. Once the migration is done, Data Center network(192.168.1.0, 192.168.9.0) will pass Meraki straight without Fortinet Fortigate firewall. To test the migration, I am going to connect a cable between Meraki and the Core Switch and pass only a few specific routes (ex 192.168.13.0/24, 10.13.10.0/24). Other subnets will be passed by 192.168.0.0/16. Once the migration is done, I will remove a cable between Meraki and Foritgate If I connect Meraki and Core Switch will it create a L2 loop?
... View more
Feb 20 2019
12:54 PM
You might have to reboot the HA several time until they sync correctly.
... View more
Feb 20 2019
12:10 PM
For BGP, you can advertise your LAN subnet, such as a connected network through EBGP between peers. For example; <Your L3 Core switch> router bgp 64555 <--Your DC AS number bgp log-neighbor-changes neighbor 192.168.19.52 remote-as 64512 <--Meraki iBGP neighbor 192.168.19.52 timers 60 180 ! address-family ipv4 redistribute connected route-map SERVER_CONNECTED neighbor 192.168.19.52 activate neighbor 192.168.19.52 soft-reconfiguration inbound exit-address-family route-map SERVER_CONNECTED permit 10 match ip address prefix-list SERVER_SUBNET ip prefix-list SERVER_SUBNET seq 5 permit 192.168.132.0/24 DC2-SW1#show ip route conn Gateway of last resort is 192.168.19.41 to network 0.0.0.0 C 192.168.132.0/24 is directly connected, Vlan503 L 192.168.132.1/32 is directly connected, Vlan503
... View more
Jan 17 2019
4:52 PM
HI Anyone can confirm that I can advertise a /24 and /32 at the same time? for example, use MX to advertise 192.168.130.0/24 and CoreSW to advertise 192.168.130.101/32 to the Spoke Site ?
... View more
Jan 17 2019
1:23 PM
Hello my Meraki Warriors ! I am trying to advertise a host route(/32) from a secondary data center. The MX is terminating its Auto-VPN and is formed a OSPF neighbor with the DC switch. Since MX is on its transparent mode, I cannot add the route from it. It has to come from another OSPF neighbor. Is it possible to inject a static route though OSPF redistribution from the Core switch to Branch MX's routing table through Meraki VPN concentrator? DC CoreSwitch: router ospf 1 router-id 192.168.19.10 passive-interface default no passive-interface Vlan129 no passive-interface FastEthernet0/1; Fa0/1: IP address 192.168.19.10 network 192.168.19.10 0.0.0.0 area 0 (transit subnet between DC Edge FW and CoreSW) network 192.168.129.1 0.0.0.0 area 0 (for MX subnet) network 192.168.130.0 0.0.0.255 area 0 ( for Server subnet)
... View more
Jan 10 2019
2:04 PM
yes but it's all about the data center design. As we all know, Meraki lacks many advanced firewall/VPN features, such as policyNAT VPN etc..., I cannot use it as I use ASA in the DC. Its role remains as an AutoVPN termination point in the data center.
... View more
Jan 10 2019
1:22 PM
Yes, I used to use the routed mode but to make the route advertisement more dynamic with OSPF, as Meraki Recommands, I will use the concentrator mode.
... View more
Jan 10 2019
11:27 AM
Tech support seems happy to know that I was wasting money when I was using the commanded design and no response after my last question.
... View more
Jan 10 2019
10:15 AM
1 Kudo
I am on the trial key for two months and will make a decision soon. Overall, the quality of information is very good. a) the span of data collection is only 7 days. I am looking forward to seeing up a month. b) some of the information is unclear. such as: Total network usage under LAN: Is it the total usage of the entire network or just a specific application. The Respnse time: to where ? to the specific server for the Application or google in general?
... View more
Jan 8 2019
11:02 AM
You will get the DHCP IP address from the ISPs. TWO ISPs, TWO WAN Switches and HA
... View more
Jan 8 2019
10:50 AM
That's what I found and it is VERY, VERY annoying. For the data center class MX, the price difference is over 10K for 5 year license.
... View more
Jan 8 2019
8:33 AM
If I don't need any advanced security feature, then I will need to get a Enterprise license instead, right?
... View more
Jan 7 2019
4:36 PM
I was designing a data center with Meraki's recommendation. https://documentation.meraki.com/MX/Deployment_Guides/VPN_Concentrator_Deployment_Guide It is an one-armed VPN concentrator method which I turned on OSPF to advertise routes dynamically. Now I just wonder if all the servers in the DC, which are on the different VLAN to Meraki MX are still protected by MX's content One-Armed VPN Concentrator filtering and traffic shaping.
... View more
Jan 7 2019
4:07 PM
To me bandwidth limiting through Uplink configuration never worked. The Meraki Supported mentioned it was meant for load-balancing. You will have use traffic shaping on other devices.
... View more
- « Previous
- Next »
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 2511 | Sep 25 2019 12:21 PM | |
| 2391 | Aug 29 2019 12:16 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 3 | 39373 | |
| 2 | 22608 | |
| 1 | 34478 | |
| 1 | 2892 | |
| 1 | 1542 |
© 2024 Cisco Systems, Inc.
