Meraki

AjitKumar · ‎Oct 22 2020

Hola @CCL_CO Si te entiendo correctamente. Esto no debería ser un desafío. 1. Su punto de acceso debe estar conectado a un puerto troncal. 2. Se permitirá la "VLAN" deseada en el puerto troncal. 3. Etiquete el SSID con la "VLAN" deseada. Eche un vistazo a la captura de pantalla como referencia.

AjitKumar · ‎Oct 22 2020

Hi @Thomas2 A few Ideas here. 1. How about try connecting another Laptop? 2. How about connecting the Laptop on other Port 4 / 5?

AjitKumar · ‎Sep 22 2020

Hi Friends, Is the following configuration possible on MX100 (IPSec) The Customer is going to connect to their client's network (The client's network might have ASA / Fortigate). Question 1 From Branch-1 to Client-1 Site-to-Site VPN (IKEv1) on Primary ISP From Branch-1 to Client-1 Site-to-Site VPN (IKEv1) on Secondary ISP From Branch-1 to Client-2 Site-to-Site VPN (IKEv1) on Primary ISP From Branch-1 to Client-2 Site-to-Site VPN (IKEv1) on Secondary ISP From Branch-1 to Client-3 Site-to-Site VPN (IKEv2) on Primary ISP From Branch-1 to Client-3 Site-to-Site VPN (IKEv2) on Secondary ISP From Branch-1 to Client-4 Site-to-Site VPN (IKEv2) on Primary ISP From Branch-1 to Client-4 Site-to-Site VPN (IKEv2) on Secondary ISP Question 2 Also please confirm NAT (Network Address Translation) is possible over Site-to-Site VPN Phase2 as interesting traffic? Question 3 SSL based remote access VPN is possible? If yes, please confirm the SSL VPN traffic can be rerouted to existing Site-to-Site VPN of Branch-1 clients Example: End User-1 connect branch-1 SSL VPN and access Client-1 Site-to-Site VPN (IKEv1) End User-2 connect branch-1 SSL VPN and access Client-3 Site-to-Site VPN (IKEv2) Regards Ajit

AjitKumar · ‎Sep 13 2020

Hi @LeonJVR Welcome to the community. You may post your queries right here. Regarding VPN configuration I believe it will work the way you are expecting. (I have never configured though) Hope you have read the following thread. https://documentation.meraki.com/SM/Profiles_and_Settings/Systems_Manager_VPN_Configurations_and_Sentry_VPN

AjitKumar · ‎Sep 1 2020

Hi Vishal, I do not see any change in the way users have been accessing the internal server. The sessions created to access internal servers will go via the same path .i.e WAN1 with the available bandwidth of 50 Mbps.

AjitKumar · ‎Aug 26 2020

Welcome, Kovac. Meraki is a great solution and for sure you will enjoy working on it.

AjitKumar · ‎Aug 26 2020

Hi @Shadius 1. Hope MR33 is live. 2. Could you please find out why your laptop is not able to access the internet when you connect the uplink cable of Switch into the Laptop? Hope your laptop receives IP Address and DNS settings from the MX68 DHCP?

AjitKumar · ‎Aug 26 2020

Hi @Shadius 1. Hope your MX68 is Live on the Meraki Dashboard. 2. By default, MS120 will search for the internet on VLAN1. If this a new setup. You may start with default configuration on MX68 and MS120. They should work seamlessly. Once the devices are live you may update the configuration as needed. Else you may need to login to the switch Manually and configure the appropriate IP and VLAN settings from the Local Status page for the switch to reach the cloud. Hope the following is your network connectivity.

AjitKumar · ‎Aug 26 2020

Hi Warren, I believe 1:1 NAT should do the trick. Not sure though. https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Configuring_1%3A1_NAT

AjitKumar · ‎Aug 26 2020

Hi @Shadius Your connectivity seems to be fine. Orange LED means the MS120 is not able to reach Meraki Cloud. Could you please connect the same cable to your laptop and check if you can access the internet? Also, make sure there are no rules on the MX68 to block the reachability to Meraki Cloud. (Hope the MX68 Port Allows All VLANS)

AjitKumar · ‎Jul 30 2020

Hey Thank you for updating us. I have been waiting for this feature for quite a long time. Regards Ajit

AjitKumar · ‎Jul 29 2020

Hi Austin, I do not see any challenges with this connectivity. This should work unless there is an issue with fiber/module. As you know the Meraki devices will appear dormant on the dashboard until they start communicating with the Meraki Cloud. I understand we shall look towards resolving this. A few ideas could be? 1. Check the Uplink port configuration/status on MS120-24. 2. Maybe you can try to connect the MS120-8 directly to one of the copper ports on MS120-24 port to see if the device is able to communicate with the cloud.

AjitKumar · ‎Jul 29 2020

Hi Darren, I never got an opportunity to configure MS390 yet. However documentation suggests, this is a management port to access the switch "Local Status Page". This does not seem to help the device reach the cloud. Kindly refer to the below URLs if already not. https://documentation.meraki.com/MS/Installation_Guides/MS390_Series_Installation_Guide https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page

AjitKumar · ‎Jul 29 2020

Hi Yoshi, I understand the status remains same as of today. Atleast I am not aware of any method to achieve this.

AjitKumar · ‎May 11 2020

Hi @Aamir The scenario is interesting however a little complex though. I do not see a great advantage of placing "MXes" at a distant sites. Ideally you may place "MXes" at the same location and have the second site as a VPN Location. Anyhow. You rightly said "One Armed" concentrators in HA requires, the WAN Interface IPs from the same Subnet / VLAN and reach ability among themselves. I understand different internet connection shall not be a problem. As the fail over detection is via VRRP on the LAN. I hope I am not wrong.

AjitKumar · ‎May 9 2020

Hi @NJacobe Few more ideas. 1. Could you please try updating the firmware? If already not. 2. Could you please try Negotiating the the WAN Interface speed Manually by logging into the Local Status page? ( I think we have the option to configure this. Not sure though) 3. Hope the Transceivers are from Meraki?

AjitKumar · ‎Apr 27 2020

Hi @BP17 Appreciate your findings. I believe Meraki Team will note this and fix the bug if any. There were few bugs reported in 14.50 by some of the user before too. https://community.meraki.com/t5/Security-SD-WAN/MX-14-50-problem-communication-between-wireless-and-wired/td-p/74184

AjitKumar · ‎Apr 10 2020

Hi @Sleiman I understand we need more information about your Idea. May be a diagram will help. However, Question 1. We shall be needing 3 IPs from the same subnet for HA (2 for Physical Devices 1 Virtual IP Acting as the SPOC) Question 2. Fail-over is Automatic. We need not do any configuration to achieve this. If you prefer, you may read the following blog to understand a little more on connectivity to achieve HA on Meraki MX https://www.ciscomerakiindia.com/post/mx-warm-spare-ha-pair

AjitKumar · ‎Apr 8 2020

Hi @Visakh_v_r I would prefer "Single" VLAN across floors.

AjitKumar · ‎Apr 8 2020

Hi @Absolute-an I understand this should work smoothly.

AjitKumar · ‎Mar 5 2020

Hi @Qing I understand "Splash Page Frequency" settings might help you here. Kindly check the following thread for more information. https://documentation.meraki.com/zGeneral_Administration/Cross-Platform_Content/Splash_Page_Frequency

AjitKumar · ‎Mar 5 2020

Hi @BFrança There seems to be some mistake. As for as I understand there is no method / means / configuration that can be uploaded to Meraki Dashboard and will automate the settings for us. The only methods I am aware of is Manual / via APIs.

AjitKumar · ‎Feb 20 2020

Hi @munaf I shall suggest go for "Advanced Security License". You may have look at the following Url (To know the difference between both the License Types) https://www.syndicateinfo.com/post/what-is-the-difference-between-the-enterprise-and-advanced-security-licenses-for-mx

AjitKumar · ‎Feb 19 2020

Hi @jhonrojas ¿Podría verificar si su red puede alcanzar los servidores DNS 8.8.8.8 / 4.4.2.2? Intente también actualizar los detalles de DNS del dispositivo con "Google DNS".

AjitKumar · ‎Feb 18 2020

Hi @renanmonteiro In my configuration "Core" Management IP is part of the "Transport" VLAN i.e /29. For other elements "Yes" I too have Management VLAN on the core. I understand this configuration "Works" unless Community Members suggests any other better Method.

About AjitKumar

AjitKumar

Ajit

Community Record

Badges