Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About ErnstTFD
ErnstTFD
Getting noticed
Member since Aug 26, 2021
Aug 21 2024
Community Record
61
Posts
13
Kudos
2
Solutions
Badges
Sep 26 2022
3:59 AM
Firmware Up to date Current version: MX 16.16 It says up to date.
... View more
Sep 26 2022
1:29 AM
Update! I have worked with my ISP to ensure that all traffic is forwarded to my Meraki. I've also added two rules to my Firewall (L3) to allow all traffic on ports 500 and 4500. When I do a packet capture on the internet interface, I get a lot of traffic on port 4500 and some traffic on port 500. However when I do a packet capture on the "Client VPN" interface, then no data is captured or recorded in the pcap file. It seems that the connection request does not reach the Client VPN interface. Do you have any suggestions where I can look to check the traffic is allowed to reach the Clinet VPN? Also I get a different error no that before: "The connection was terminated by the remote computer before it could be completed" When I look in the Windows event log I get error code: 628.
... View more
Sep 22 2022
11:57 PM
Hello, I'm back at the office. We can setup a test whenever you are ready.
... View more
Sep 22 2022
11:56 PM
Hi, I used this script tool to create a VPN Profile. The result is the same when I try to connect the VPN. Thanks for the advice though, the script tool is handy. Question: If I run the script by clicking on it an select "Run script" it fails. I opened the script in ISE and tried to run it and got an error "Unable to remove existing instance(s) of TFD Meraki profile: Access denied" I then re-opened ISE in administrator mode and then the script executed fine. Is there a way to run the script as an administrator without opening ISE?
... View more
Sep 22 2022
7:49 AM
For a quick test I can allow that. However it is time for me to go home now and I will only be back in the office tomorrow morning. Can we take this up again tomorrow? I will send a reply when I am back in the office tomorrow. (Thank you very much for your assistance so far, it is very much appreciated).
... View more
Sep 22 2022
7:32 AM
Sorry, what is "Chap" and how do I enable it? Internet is not shared.
... View more
Sep 22 2022
6:00 AM
We have 2 internet lines, I tested over the backup line. Then I also tested with my mobile hot-spot on my phone, ie. 4G. Same results.
... View more
Sep 22 2022
5:10 AM
I checked the Windows Event log and it gives code 789. I followed all the steps in the troubleshooting guide for error 789. 1) Check pre-shared key, this I double checked it is 100% correct. 2) Firewall blocking traffic. I created rules to allow all traffic on ports 500 en 4500 in as well as out. 3) IKE and AuthIP service is running. I still get the same error and the same code in the event log.
... View more
Sep 22 2022
4:02 AM
I followed the configuration guide yes. I also checked the event log, but nothing shows up here.
... View more
Sep 22 2022
3:52 AM
I also changed this encryption setting as I found the instruction on the Meraki help pages. This did not change anything. Connection still fails with the same error.
... View more
Sep 22 2022
3:38 AM
Hello, I enabled Client VPN, configured a pre-shared key. I chose Meraki Cloud authentication and configured a new user with VPN authentication. When I try to connect to the VPN form a remote system I get this error: "The L2TP connection attempt failed because the security layer encountered a processing error during initial negotiations with the remote computer" I copy/pasted the pre-shared key, the username and the password, so there cannot be a typing error. I created and deleted the VPN connection three times. Every time I get the same error. Any ideas what I might be doing wrong?
... View more
Aug 29 2022
1:01 AM
2 Kudos
Thanks this helps alot. The second subnet is for accounting dept. However they require access to servers and printers that live in the first subent as well. Thus I give two IP's to each PC. Now that you mention it, with some reconfiguration, it might not be necessary to do it that way. I could move everything they need into their own subnet. I'll give it a go.
... View more
Aug 29 2022
12:21 AM
I've been using our Meraki MX64 for a while now as a router with a single VLAN. I've got it configured so that unrecognized devices (by MAC address) is blocked and known devices is assigned a fixed IP and group policy. This works great. I want to maintain the above functionality but add VPN access plus a second VLAN. Preferably only specific VPN users should have access to the second VLAN, while all VPN users should access the first VLAN. I can try to figure this our by trail and error, but I would appreciate any help/pointers you can give me in advance. Any pitfalls I should be aware of? For example: Is it possible to assign two IP's (one for each subnet) to one MAC address using DHCP? Thank you in advance for any advice you can give me.
... View more
Apr 20 2022
5:15 AM
It works with web file sharing removed. This is unfortunate, as it severely limits the use of layer 7 rules.
... View more
Apr 20 2022
4:45 AM
I have an MX64 with the latest firmware 16.16 In one of my Group Policies I have added "wetransfer.com" as well as "we.tl". Despite this I cannot access this website and get and error "website can't be found". If I plug a PC directly into my router bypassing the MX64 then wetransfer works perfectly. I do have "All Web file sharing" enabled in the "Layer 7 firewall" settings, but the whitelist should overrule this setting right? In "Blocked website categories" only "peer-to-peer" is blocked nothing else relating to file sharing is blocked. Also in this specific group policy I'm blocking ports 50,000 to 65,535. Should this be a problem? Thank you for any advice.
... View more
Mar 24 2022
2:22 AM
1 Kudo
Glad to know I'm not the only only struggling. Hope a fix is coming soon.
... View more
Mar 24 2022
2:12 AM
1 Kudo
Since a few days ago (maybe 3 or 4), my Meraki cannot sort columns correctly for some reason. Specifically the Data Usage column on the Clients page does not work anymore. For example, a user that used 74.6MB of data is ranked higher than a user that used 2.64GB of data. It's all scrambled and not linear anymore. My firmware is up to date. Ie. 16.16. Any suggestions what I can do? Should I just wait for a firmware new update?
... View more
Jan 19 2022
10:20 PM
Do you have an example how to do this? I have never seen something like this.
... View more
Jan 19 2022
10:19 PM
Not all PC's are configured like this, this is just my PC that needs to be able to access everything. Most PC's have one IP, some of them two and a handful three or more. For example our electrical department do a lot of setup and experimentation work. For that they have their own subnet. But they also need to be part of the main subnet to access nas drives and the internet etc. Then we have a separate network for backups, to keep them safe. I have a seperate NIC in my PC to acces only that subnet. I don't know how you will do this with routing?
... View more
Jan 19 2022
6:51 AM
Hi there, we use many different subnets in our company for different resources. The only subnet/VLAN I have loaded on my Meraki is 192.168.1.x because this is were I want it to serve. Because of all the subnets I have multiple PC's with more than one IP depending on which subnets they need access too. This causes errors in my event log with the Meraki saying that the IP and MAC doesn't match up and that there are illegal packets. Thank goodness it does not block these "illegal packets". So it does not cause me any problems. except the hundreds of "false" events in my event log that I don't want there. When I access the event log I always enter IP/VLAN mismatch in the "Event type ignore" box. So that it doesn't bother me. I was just wondering if there is a better way of dealing with this? Can I tell the Meraki to ignore other subnets than the one it has been assigned? Or is a better way to load all of these subnets as VLAN's into the Meraki and configure access rules for every one? Here is an example of IP's configured on one of my PC's and on one of it's network adapters: IPv4 Address. . . . . . . . . . . : 5.0.0.40 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IPv4 Address. . . . . . . . . . . : 10.0.0.140 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IPv4 Address. . . . . . . . . . . : 10.5.5.140 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IPv4 Address. . . . . . . . . . . : 10.10.10.140 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IPv4 Address. . . . . . . . . . . : 10.90.90.40 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IPv4 Address. . . . . . . . . . . : 172.172.2.40 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IPv4 Address. . . . . . . . . . . : 192.168.0.40 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IPv4 Address. . . . . . . . . . . : 192.168.1.40 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IPv4 Address. . . . . . . . . . . : 192.168.2.190 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IPv4 Address. . . . . . . . . . . : 192.168.50.140 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IPv4 Address. . . . . . . . . . . : 192.168.254.40 Subnet Mask . . . . . . . . . . . : 255.255.255.0
... View more
Sep 16 2021
11:16 PM
We definitely have a policy against misuse of IT privileges that includes downloading or pirating non-work related data. That policy is included in their work contract, so there is no denying that he did something wrong. He might even get a written warning with regard to the incident, though that is up to his department head, not me. @BrandonS I already had a talking to the person together with his department head. As you say the more people in the company are aware that they are being monitored the better their online behavior will be. So far I have blocked all ports from 1024-65535, and that seems to have stopped the software in its tracks. Though now we have some other services that has been influenced and I'll have to spend some time figuring out which specific ports it requires to work. I'm sure we will get everything working properly again soon.
... View more
- « Previous
-
- 1
- 2
- Next »
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 14131 | Oct 11 2022 11:54 PM | |
| 26187 | Sep 10 2021 2:26 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 4 | 1687 | |
| 2 | 1371 | |
| 2 | 1249 | |
| 1 | 5230 | |
| 1 | 1235 |
© 2024 Cisco Systems, Inc.
