Meraki

MilesMeraki · ‎Dec 27 2017

No. Meraki does not have the ability to route applications directly out to the "Internet" rather than over a VPN. You can configure VLAN's to not be used in the VPN, to be able to have this traffic routed directly over the "Internet". In your example, why are you routing everything bar Office-365 over the site to site VPN? Why not let all traffic that's not required to go to the site to site VPN directly out to the Internet? - Kind of defeats the purpose of SD-WAN and will also cause higher latency on this traffic?

MilesMeraki · ‎Dec 27 2017

I highly doubt there would be. CSP licensing is a license model created by Microsoft for Cloud MSPS. What's the use case for CSP licensing for VMx anyway? Surely you could achieve the same thing via the normal licensing route just adjusting your T&C's of sale to your customers to fit this model? Meraki already offers a Licensing model to easily set up yourself as an MSP - https://documentation.meraki.com/zGeneral_Administration/Organizations_and_Networks/Licensing_for_Managed_Service_Providers_(MSPs)_-_FAQ

MilesMeraki · ‎Dec 27 2017

All Meraki MX's only support a maximum of 2 "WAN" ports. It would be great to find your use case/need as per @PhilipDAth's comment above to see if we can assist you in achieving your architecture.

MilesMeraki · ‎Dec 27 2017

Looks like a duplicate of your other thread? Refer to https://community.meraki.com/t5/Security-SD-WAN/Fast-Lane/m-p/8155#M2010.

MilesMeraki · ‎Dec 26 2017

A Support Engineer should be available 24x7x365. Meraki has follow the Sun Support teams based in San Francisco, London, and Sydney. I'm also hearing that they are now expanding into Asia also!

MilesMeraki · ‎Dec 26 2017

Where are VLANS 101 and 102 currently configured? in your example I You’ll only need to configure those access layer VLANS (anything connected to the MS250 ports) on the MS250 switches. You’ll want to create a seperate switch network for your MS425 switches and create the VLANS on these switches where you have devices connected to these switches. I.e Storage, DMZ. youll then want to run OSPF between the MS425’s and MS250’s. so to answer your question, surely the layer 3 gateway/domain will terminate on the MS250’s which will natively perform inter-vlan routing as long as no ACLs are configured.

MilesMeraki · ‎Dec 24 2017

@Poonyalid From my knowledge Meraki support use to have the ability to perform an 'Org split'. You could request for networks from one organization to be split out into their own individual networks retaining their existing configuration and licensing. Avoiding the manual process and minimizing downtime. Open up a support case with Support via the dashboard and ask for an 'Org Split'. This will allow you to see if they still can perform this task and ask you all the information they require to perform the split (New org Name, Which networks to split out, which licenses to transfer etc...) - Note, there is a slight outage experienced when performing the split so do it after hours, however Support will able to relay this information to you.

MilesMeraki · ‎Dec 22 2017

Love it. The MX Gnome definitely looks like a Boss. Not too sure about a single point of failure though 😉 🎅

MilesMeraki · ‎Dec 22 2017

🎅

MilesMeraki · ‎Dec 21 2017

Have you explored the option of using cellular/LTE as a backup link?

MilesMeraki · ‎Dec 21 2017

I've seen this issue before and seen it reported as a bug. There was an issue with a range of OUI AP hardware. I can't remember what the fix was other than a firmware upgrade once a fix was pushed. My recommendation would be to get a case open with support to make sure there isn't already a bug reported for this with is with Eng.

MilesMeraki · ‎Dec 21 2017

Happy 4-Monthy Birthday! Looking forward to seeing the Community Grow in 2018!

MilesMeraki · ‎Dec 21 2017

"to"

MilesMeraki · ‎Dec 21 2017

"This" "The" "I "They" ... Let's be more Meraki specific; "MR" "MX" "MS" 🙂 ?

MilesMeraki · ‎Dec 20 2017

I'd love this feature also. There are so many other vendors which have SD-WAN capable Firewalls on the market I'd love to Meraki to be one of them.

MilesMeraki · ‎Dec 20 2017

As Phillip has stated, the API call does not appear to return the subnet mask information for an up-link. My recommendation would be to submit a wish via dashboard and also post the wish in this thread - https://community.meraki.com/t5/Dashboard-Administration/Make-a-Wish-Requests/m-p/2295#M159 Return an array containing the uplink information for a device. HTTP REQUESTGET /networks/[networkId]/devices/[serial]/uplink PARAMETERS None SAMPLE REQUEST curl -L -H 'X-Cisco-Meraki-API-Key: <key>' -X GET -H 'Content-Type: application/json' 'https://api.meraki.com/api/v0/networks/[networkId]/devices/[serial]/uplink' SAMPLE RESPONSE Successful HTTP Status: 200 [ { "interface":"WAN 1", "status":"Active", "ip":"10.0.0.0", "gateway":"10.0.0.1", "publicIp":"123.123.123.1", "dns":"8.8.8.8, 8.8.4.4", "usingStaticIp":true }, { "interface":"WAN 2", "status":"Ready", "ip":"10.0.4.2", "gateway":"10.0.4.1", "publicIp":"123.123.123.2", "dns":"8.8.8.8", "usingStaticIp":false } ]

MilesMeraki · ‎Dec 20 2017

All Meraki switches come with all their ports set to VLAN 1 and Trunks with No ACL's to stop intercommunication between clients. To answer your question, should PC>Merak Switch>PC on port 443 work, the answer is yes. If there is a firewall in-between the two clients, definitely check that Port 443 is open to allow communication between the two clients. Alternatively also check that there are no host-based firewalls which could be stopping communication on port 443.

MilesMeraki · ‎Dec 19 2017

It's saying it's a combined network within the dashboard. Do you have any Meraki switches/aps within the same Meraki network? If so split the networks out into their own individual networks and then try again re-applying the tracking change. https://documentation.meraki.com/zGeneral_Administration/Organizations_and_Networks/Combined_Dashboard_Networks

MilesMeraki · ‎Dec 19 2017

I'd say they'd have to associate to the network again so that you can "unblock" them. I'm not sure, but if a client is not seen by the network for 30 days and then re-joins, it may effectively be treated as a "new" client and if a manual policy was applied to it before it was not seen for 30 days, it may not obtain this policy when it re-joins. - You might want to confirm this with Support/A Meraki employee.

MilesMeraki · ‎Dec 19 2017

I don't see any way of doing this past 30 days. To my knowledge Meraki only keeps clients from the past 30 days it was last seen on the network.

MilesMeraki · ‎Dec 19 2017

Can you post a topology diagram to allow for easier understanding of your current design. Is the 3750 currently doing any dynamic routing?

MilesMeraki · ‎Dec 19 2017

Is the AP that the user is connecting too showing that it's Config is up-to-date? I'd also try clearing the cache and removing the SSID from the stored wireless connections on the client and trying again.

MilesMeraki · ‎Dec 19 2017

Great idea @PhilipDAth 🙂 I'm sure this thread will soon start to fill up 😉

MilesMeraki · ‎Dec 17 2017

Hey @MerakiDave, reached out to support and got the following reply, Greetings Eliot, Thank you for contacting Cisco Meraki Technical Support. Unfortunately, we have reached a limit on the beta users for this feature and we are not accepting any more networks or customers to the beta at this time. Any chance you can help out? I'm really keen to get my hands on this feature.

MilesMeraki · ‎Dec 17 2017

@MerakiDave I'm interested in the URL Logging. I'm looking at the network-wide>general and under reporting, I don't see any tick box for URL logging, I'm running 14.7 on the MX network. Is this still available?

About MilesMeraki

MilesMeraki

Eliot Foye

Community Record

Badges