Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About lpopejoy
lpopejoy
A model citizen
Member since Sep 1, 2017
Feb 6 2024
Community Record
188
Posts
84
Kudos
2
Solutions
Badges
Mar 14 2022
11:24 AM
Yeah... I got excited when I saw it show up a while back. I even opened a support ticket today just to be sure this wasn't one of those magical "you have to contact support to get the feature enabled" things.... Here is their response: Thank you for contacting Cisco Meraki support. My name is _ and I will be the support engineer assisting you on this case. This is currently a known issue our development team is aware of. That graph is not populating because it is not a fully developed feature and is planned to be removed from the report due to this. Unfortunately, there is not any other information I can provide regarding the CPU utilization, but feel free to respond with the issues you are seeing on the device and we can hopefully troubleshoot it further. Please feel free to let me know if you need any further assistance or have any questions.
... View more
Mar 14 2022
9:45 AM
2 Kudos
I'm dealing with a lot of packet loss on a small network. Support says that the CPU is hitting peak utiliization about 75% of the time. Two questions: 1. There is abviously something going on that is causing the CPU to max, but I'm not sure how to isolate this issue. What would you do? 2. It is a bit frustration to have to call support and sit on hold for 40 min just to find out the the cpu utilization is. Does anyone know if there is a way to get this data via API? (note this is different that the performance score which IS available via API) 3. Is there a way to get the built in chart for CPU Usage to work? (org->Summary report->select a single network)
... View more
Feb 11 2022
6:47 PM
anyconnect doesn’t help with site to site. …and it has a minimum license purchase of 25 licenses which pretty much kills its usefulness for most of our clients. Otherwise, I agree.
... View more
Feb 10 2022
9:57 AM
I know it isn't available, that's why I posted! This needs someone inside Meraki to push it up the development path.
... View more
Feb 10 2022
3:40 AM
1 Kudo
Two issues: Client VPN - almost zero firewall rules around this. Excluding the hack job of using group policy and assigning to the VPN client device (which isn't reliable) Site to Site VPN w/ 3rd party firewalls - no ability to block inbound traffic. Meraki's position is that it all needs to be blocked "closest the the source". That's all good and well, but what if you don't have control over the source. We have multiple cases of setting up S2S VPN's w/ 3rd party firewalls and outside vendors. I don't like it, I don't want to do it, but didn't have a choice. That really terrible part is that we have to expose our entire network to the 3rd party and can't control the ingress on the VPN. We NEED firewall rules on inbound VPN traffic - both S2S AND Client VPN - but especially S2S. Every other firewall I've worked with has this capability. PLEASE!!
... View more
Labels:
- Labels:
-
3rd Party VPN
-
ACLs
-
Client VPN
Dec 28 2021
11:33 AM
I'm pretty sure MSP relationships are not Meraki's top priority. Unfortuantely.
... View more
Dec 27 2021
1:19 PM
But you can't split that 25 licenses over multiple organizations can you? You are just saying that one multi-site organization can share the 25 licenses across all of their sites?
... View more
Dec 27 2021
1:00 PM
Am I missing something or is there no way to license less than 25 users for a site?
... View more
Labels:
- Labels:
-
Client VPN
Dec 13 2021
10:01 AM
Ah, ok. So if it would have been HTTPS, would it still have been blocked? My guess is "no."
... View more
Dec 13 2021
9:36 AM
@DangerNoodle that is VERY cool. Thank you for sharing that. I would still like to know more details on *how* it works, but I guess it is just looking at source IP's. Do you know if this connection was inbound to a TLS encrypted port?
... View more
Dec 11 2021
1:03 PM
9 Kudos
According to https://blog.talosintelligence.com/2021/12/apache-log4j-rce-vulnerability.html Meraki MX (w/ Advanced Security, I'm sure) can detect and block Log4J exploits (https://www.huntress.com/blog/rapid-response-critical-rce-vulnerability-is-affecting-java). I'm curious how this is possible if the the traffic is TLS encrypted. As far as I know, Meraki MX is not doing SSL inspection/decryption which means that Log4j compromises couldn't be detected, right?
... View more
Labels:
- Labels:
-
Other
Nov 30 2021
5:21 PM
Hello, In the last few weeks we have had to open multiple support cases for different sites due to the fact that their Site to site VPN between MX appliances in the same organization was unstable. Support "changes the VPN registry" due to the "registry being overloaded" and this resolves the issue. This is VERY frustrating to me on multiple points: If the registries are overloaded then fix the real problem This shouldn't require me to open support tickets to fix There is no way that I can see what registry is being used, if it is the problem or not... I just open a ticket, and cross my fingers that support will fix it. Anyone else seeing this?
... View more
Labels:
- Labels:
-
Auto VPN
Nov 7 2021
5:25 PM
I would start by directly connecting a computer to the modem. Make sure you have consistent speed test and ping results. If so, then test the phone the same way. Work down from there until you find the culprit.
... View more
Nov 7 2021
5:14 PM
You can still connect directly even if it’s bridged. You just have to assign the static Ip to your computer.
... View more
Nov 7 2021
5:42 AM
Try connecting a computer directly to the modem to test. Make sure that is solid. yes, you could take your MX over and plug it in. It sounds like even 15 min would be enough to see if that was the culprit. Check what DNS servers the phones are using. I know it sounds unlikely (and probably not the issue if there is packet loss anyway)…. But I recently fixed and issue kind of like this. Turns out the DNS being used wasn’t responding quickly enough and lookups were failing.
... View more
Jul 26 2021
8:45 AM
1 Kudo
Yes, just upgraded last week. Thanks for comparing with me! Not sure what's up.
... View more
Jul 26 2021
7:24 AM
1 Kudo
Weird. Also running Advanced Security here. I'm confused. Seems like we have an identical setup, yet you have AnyConnect, and I do not.
... View more
Jul 26 2021
7:16 AM
Right, that's what I was expecting. It just isn't there on MX64. You see it on yours on an MX64 running 16.9?
... View more
Jul 26 2021
7:07 AM
@OVERKILL , I was looking for an Any Connect option under ClientVPN on the MX64. Is that not the right thing?
... View more
Jul 22 2021
3:19 PM
Does anyone know when support for Cisco AnyConnect client VPN will be released on MX64?
... View more
Jun 7 2021
7:11 AM
1 Kudo
See this thread and then decide if you want to use them: 🙂 https://community.meraki.com/t5/Security-SD-WAN/All-firewall-rules-disappeared/m-p/116160
... View more
Jun 4 2021
5:51 AM
Yeah, ok. Too bad! Doesn't that duo setup require running an on-prem server for that proxy?
... View more
Jun 4 2021
5:33 AM
@PhilipDAth , do you know if you can support MFA w/ AnyConnect?
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 2426 | Jun 7 2021 7:11 AM | |
| 18493 | Jun 30 2018 9:00 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 9 | 17313 | |
| 8 | 3883 | |
| 4 | 5031 | |
| 3 | 1483 | |
| 3 | 2018 |
© 2024 Cisco Systems, Inc.
