I've configured five MS130-48P switches to trust DAI. However, I still have DAI Blocked on one of switches in the events log.  One of the switches initially connected and then disconnected with a message 'High Rate STP Topology Change'. I've tried disconnecting and reconnecting to different ports but still having same issue. All the MS are configured with a trunk port that connects to a catalyst 3850 switch. Thanks ... View more

I've just taken delivery of 9 MR44. I've configured each to use static assigned IP Address but somehow these APs are collecting DHCP from the DHCP Server on the LAN. These AP are connected to MS130P switches. I've disabled DHCP on the switches.  The MR36 that is also connected to the same switch is using the assigned static IP Address.  Two of them are acting as repeaters.    Any ideas why this might be the case?   Thanks. ... View more

Present Scenario:  I've got an MX84 SDWAN as the firewall and Default gateway. Connected to this is a Cisco 3945 ISR and a 3850 switch.  The 3945 ISR is configured to be the Call Manager and issues out DHCP to the Cisco Desk phones. Also connected and configured is an ISDN Module.  There are two vlans. Data and Voice The 3850 switch is configured as the backbone switch. Connected to this switch are five (5) 2960x Series switches. These switches connect the Access Points and LAN connections.  The Access Points are configured via a Cisco 2500 WLAN Controller.  There are nine (9) Access Points. Two (2) 3702I-A-K9 and seven (7) 1602I-C-K9 The 2960 switches have two ports configured as uplinks.    Migration: I am taking delivery of five (5) MS130-48P switches and nine (9) MR-44 access points.    Questions: Is it possible to have the MS130-48P switches as a call Manager? If possible how do I configure? Ideally, I will like to decommission the 3945 ISR, 3850 switch and the WLAN Controller. I will want the services transfer to either the MX84 SDWAN or the 130-48P switches.    Your help questions and suggestions are welcome.   Thanks  ... View more

I've got a Cisco 1921 Series router and an SDWAN within my network.  The link from the service provider connects to the 1921 Series router and the router connects the SDWAN.   I want to take the 1921 router off the network.  Before doing so I want Can the configuration in the router be configured in the SDWAN Below is the configuration from the router. How can this be translated to the routing config in the SDWAN.  The aim to have the connection from the ISP directly connected to the SDWAN since its already configured as the default gateway and Firewall.    Thanks   x.x.x.x 255.255.255.248       interface GigabitEthernet0/1  ip address x.x.x.x 255.255.255.248  ip nat outside  ip virtual-reassembly in  duplex auto  speed auto ! interface GigabitEthernet0/2  ip address x.x.x.x 255.255.255.252  ip nat outside  ip virtual-reassembly in  duplex auto  speed auto   ! ip tftp source-interface GigabitEthernet0/0.5 ip nat pool Pool-NAT-ISP1 x.x.x.x x.x.x.x netmask 255.255.255.252 ip nat pool Pool-NAT-ISP2 x.x.x.x x.x.x.x netmask 255.255.255.252 ip nat source static x.x.x.x x.x.x.x ip nat inside source route-map ISP1 pool Pool-NAT-ISP1 overload ip nat inside source route-map ISP2 pool Pool-NAT-ISP2 overload ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1 x.x.x.x track 1 ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/2 x.x.x.x track 2 ! ip access-list extended Internet  permit ip 172.16.0.0 0.0.1.255 any  permit ip 192.168.20.0 0.0.0.255 any ip access-list extended RTR-SIP-REG  permit ip host 172.20.0.2 any ! ! nls resp-timeout 1 cpd cr-id 1 route-map ISP2 permit 10  match ip address Internet  match interface GigabitEthernet0/2 ! route-map ISP1 permit 10  match ip address Internet  match interface GigabitEthernet0/1 ! no ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1 x.x.x.x x.x.x.x track 1 ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1 x.x.x.x track 1   no ip nat inside source route-map ISP1 pool Pool-NAT-ISP1 overload no ip nat pool Pool-NAT-ISP1 x.x.x.x x.x.x.x netmask 255.255.255.252 ip nat pool Pool-NAT-ISP1 x.x.x.x x.x.x.x netmask 255.255.255.248 ip nat inside source route-map ISP1 pool Pool-NAT-ISP1 overload ... View more

Hi All, My Meraki dashboard reports that Google Services is utilizing on average 60% of the bandwidth alone. I want to do traffic shaping of this service but do not know the expression to use to limit its usage or do scheduling when it should run.   Help needed.    Thanks ... View more

Hi, The MX Events constantly gives me the IDS Alerts: INDICATOR COMPROMISE: Suspicious .top dns query event. Whats worrying is that the source is from my Domain Controller and the destination is to dns.google.  I've also got an android device which I am yet to identify since it appears with its mac address having the same alert.   Added to that, today, I have seen an event from an external IP Address source to a device within my network with a SERVER-WEBAPP: PHPUnit PHP remote code execution attempt and a GPON Router authentication bypass and command injection attempt.    Any help is welcome. Thanks ... View more