Hi,   Scenario: We have one machine on a dedicated VLAN/Subnet that we don't want accessing the internet. What would be the best Meraki approach for denying internet access f but allowing it to access remote and local subnets.    Client is connected to a switch.    Thanks Adam   ... View more

We have an MX65 with cheap NBN internet connecting on internet 2 (primary internet 1 MPLS). Occasionally internet 2 fails and it simply says failed. The NBN router is managed by the ISP and has 4G fail over. This only happens when the router has failed to 4G. The ISP router hands out a private IP to our MX.    Questions: Is it possible the MX65 has an issue changing/updating the public IP for internet 2 when the router has failed to 4G?  Anyone have some tips troubleshooting the unhelpful failed error? Should we be using a static address on the interface instead of DHCP?    Note - The service provider can access the router over 4g.    Thanks!               ... View more

Hi,   Is it possible to enable bonjour when using VPN: tunnel data to a concentrator.   I see it says Bonjour forwarding: Bridge mode and layer 3 roaming only   No tricky way of doing it maybe? 😃   We tunnel guest traffic to a concentrator.    Thanks Adam   ... View more

Hi,   Seeking some guidance around warm spare configuration with MX65.    Question 1: does the spare mx need uplinks to both internet interfaces?    Currently we have a masterMX with Internet 1 (MPLS connected) and Internet 2 (SP Managed Router NAT). The spare MX has no uplink in internet 1 but uses internet 2 connected to the SP managed router.    The service provider managed router is giving the MXs an IP Addresses via its DHCP. The MPLS is a static private address.     Question 2: Is it poor practice to use a direct heartbeat cable between the MX devices? We are using a heartbeat between the two MX devices and also have two MS120 switches connecting both MX devices.    Happy to clarify further if my explanation is no good. As of late we are having very strange symptoms with MX devices fighting each other randomly.    Thanks AH     ... View more

Hi,   Does Meraki have BPDU filter anywhere as an option? Thanks Adam   ... View more

We are currently migrating to Meraki for wireless/switching etc.    In our factory environment we use Cisco access points in autonomous/WGB mode for machine uplinks. Instead of using a Meraki AP in gateway mode we would like to retain the use of Cisco AP for uplinks.    Design Flow Merak AP -> Cisco WGB -> Windows10 Client   Upon testing Cisco WGB mode with Meraki as the parent we have noticed strange ARP occurrences for DHCP. If you are fortunate enough to get a DHCP lease on the Win10 machine and you renew the lease it will fail to get the address again. If i clear the Bridge 1 cache on the WGB you will get the IP address.    Adams_WGB_TEST_MERAKI#show arp Protocol Address Age (min) Hardware Addr Type Interface Internet 10.128.128.128 0 e0cb.bc35.6746 ARPA BVI1 Internet 172.xx.24.1 0 1cdf.0fca.0080 ARPA BVI1 Internet 172.xx.24.27 - a89d.218d.56e8 ARPA BVI1 Internet 172.xx.24.29 0 a860.b61c.a592 ARPA BVI1   Question 1:   Why are we seeing 10.128.128.128 still? The Meraki AP is in bridge mode and has got itself an IP from our network.    Question 2:    Does Meraki do anything odd with ARP caching or proxy arp? The Cisco WGB receives its address perfect just not the client attached to it.      Question 3: Has anyone else connected autonomous to Meraki AP before?   I know this scenario verges on Cisco and Meraki and will raise a TAC and Meraki support case for detailed analysis but want to throw it out anyway.    Thanks Adam       ... View more

Hi, What would be the equivalent of IP directed broadcast in Meraki land?    In our Cisco traditional environment we enable IP directed broadcast on the vlan/sub interfaces to allow remote subnet discoveries.    Why you might ask? Some software such as RS Linx uses broadcast when discovering devices.    Im thinking IGMP snooping?    Thank you Adam   ... View more

Just seeing if anyone has come across an issue in MS10.26 where OSPF breaks each time you create a new interface.   When I say break I mean it wont bring the new neighbour up, campus OSPF.    Current work around is to restart the (backbone) stack which makes the OSPF process work correctly again.    From what we can see so far OSPF stub is sending helpers but receives nothing back. ... View more