Meraki

alemabrahao · ‎Jan 26 2023

VPN traffic is SD-WAN policy. Internet rules, you must use the flow preferences, Internet traffic, but you can only use the IP, not the application. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/SD-WAN_and_Traffic_Shaping#Flow_preferences

alemabrahao · ‎Jan 26 2023

You can try changing the phase 2 lifetime to 3600s.

alemabrahao · ‎Jan 26 2023

Yes WLC, does not support LACP, but you can use a backup port configuration. 😁

alemabrahao · ‎Jan 26 2023

You can connect directly on MS120, It will work as expected.

alemabrahao · ‎Jan 26 2023

You've tried all possible options, maybe you can try with a different version.

alemabrahao · ‎Jan 26 2023

Open a support case.

alemabrahao · ‎Jan 26 2023

Have you tried it? https://community.meraki.com/t5/Security-SD-WAN/IPSEC-Tunnel-withZScaler/m-p/53769

alemabrahao · ‎Jan 26 2023

And also not even the first and last character of the password can be a special character.

alemabrahao · ‎Jan 26 2023

Is your MX behind a CG-NAT?

alemabrahao · ‎Jan 26 2023

Follow these recommendations: Security & SD-WAN -> Configure: Site-to-site VPN -> Non Meraki VPN settings: Preshared secret must be greater than 14 characters Authentication cannot be MD5 Diffie-Hellman Group must be 14 Phase 2 encryption cannot be NULL PFS can be configured to be either off or 14

alemabrahao · ‎Jan 25 2023

I agree with @RaphaelL.

alemabrahao · ‎Jan 25 2023

Did you configure the STP priority? It is a best practice to set the Core switch to the lowest priority and for access switches you can use the default priority. Also, verify that there is no other cable connected to the 3750x that could be causing a network loop. I would recommend som Key points: 1. Use Rapid STP with command spanning-tree mode rapid (default is STP ) 2. Determine the best switch to be Root switch and set Bridge Priority (spanning-tree vlan x priority 0) 3. Adjust ports costs to Root switch (spanning -tree vlan x cost x) STP decisions are based on the following sequence of four conditions: 1. Lowest root bridge ID 2. Lowest root path cost to root bridge 3. Lowest sender bridge ID 4. Lowest sender port ID

alemabrahao · ‎Jan 25 2023

Yes, It's correct.

alemabrahao · ‎Jan 24 2023

You must open a support case and ask them to install this version for you as this version is no longer available on the dashboard.

alemabrahao · ‎Jan 24 2023

So sad. 🙁

alemabrahao · ‎Jan 24 2023

The new MX family has more than 2 dedicated WAN interfaces.

alemabrahao · ‎Jan 23 2023

Flexible stacking will work like the Physical stacking, and will share the configurations (like the tardicional staking). https://documentation.meraki.com/MS/Stacking/Switch_Stacks#Flexible_Switch_Stack_Configuration_Steps It is recommended to configure and use identical port types as flexible stacking ports. For example, 2 x 10Gb/s (SFP+) or 2 x 40Gb/s (QSFP) interfaces can be connected together as flexible stacking ports. Please note that 10 Gb/s is the minimum speed required to support flexible stacking.

alemabrahao · ‎Jan 23 2023

MS 420 and MS 42 just support Flexible stacking and virtual:

alemabrahao · ‎Jan 23 2023

Physical stacking is available on MS210, MS225, MS250, MS350, MS355, MS390, MS410, and MS450 switches, which include dedicated stacking ports. Flexible stacking is available on MS420 and MS425 switches which do not have dedicated stacking ports; any port on these switches can be configured as a stack port. MS 420 just supports Flexible stacking and virtual:

alemabrahao · ‎Jan 23 2023

I and other members of the community had the same problem, in this case my suggestion is to downgarde to one of the 16.16.x versions.

alemabrahao · ‎Jan 23 2023

If you are talking about WAN interface check it out: https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page#MX_Series_with_Single_Dedicated_WAN_Link

alemabrahao · ‎Jan 23 2023

No, the MX can serve as a DHCP relay, but you need to configure a LAN IP for it.

alemabrahao · ‎Jan 23 2023

I think that you just need to configure a new dashboard account: https://documentation.meraki.com/General_Administration/Organizations_and_Networks/Creating_a_Dashboard_Account_and_Organization https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Meraki_Cloud_Architecture#Data_Center_Locations

alemabrahao · ‎Jan 22 2023

Your configuration looks fine, have you tried performing a factory reset on AP? Try changing the port to access port one of those VLANs.

alemabrahao · ‎Jan 21 2023

Here is the full documentation. https://documentation.meraki.com/MR/Other_Topics/SSID_Availability

About alemabrahao

alemabrahao

Alessandro Abrahao

Community Record

Badges