Meraki

MRCUR · ‎Dec 14 2017

I'll also add that I did an MS webinar over a week ago. Never heard from the assigned rep (not you, @MerakiDave!) and he hasn't responded to emails about the free switch.

MRCUR · ‎Dec 14 2017

Make sure that the MX has a route to the network you're trying to access. And make sure that upstream devices have routes back to your VPN subnet. Not seeing a gateway is normal for client VPN.

MRCUR · ‎Dec 12 2017

@jared_f wrote: VPP is mandatory to have silent app installs. If you are setting VPP up I recomend you do user based licenses because they are easier to track and manage (in my opinion). Jared I find the exact opposite. Device based licensing makes everything so much easier. Deploying devices without having to bother with getting an Apple ID onto them is great.

MRCUR · ‎Dec 11 2017

Yes, you can do this with device based app licensing. This will allow you to silently install the app. You should "purchase" licenses for the SM app in the VPP store and then deploy it to devices making sure to select the device assigned licenses.

MRCUR · ‎Dec 11 2017

@Paulofg wrote: To get a whole subnet to use a different outbound IP you will only be able to do that if the IP belongs to the WAN interface and as someone mentioned above you could achieve that with another L3 device connected to WAN2. You don't have to connect it to WAN2 in the setup I suggested to be clear.

MRCUR · ‎Dec 10 2017

Do you have a /30 from the ISP AND another block of IP's that the ISP is routing to the /30 (Comcast does this for example)? In that case, what I've done in the past is terminate the /30 on a L3 switch that sits in front of the MX. Then on the switch, create a VLAN with the public IP block and connect the MX WAN port to this VLAN.

MRCUR · ‎Dec 8 2017

I'm pretty sure the MX can only NAT from the outside (WAN) interface to an inside (LAN) interface, so I wouldn't expect the setup you're trying to do to work with an MX. It's not totally clear to me why you have this setup, so perhaps there's a workaround that's not clear to me.

MRCUR · ‎Dec 5 2017

@BHC_RESORTS Agreed. I've been asking about it for a while now. Perhaps they're having a hard time making it Meraki simple to run dual-stack.

MRCUR · ‎Dec 5 2017

@PhilipDAth Had to do this today after the introduction thread seemed to blow up! I guess the community has been discovered by the masses now.

MRCUR · ‎Nov 25 2017

See the passthrough mode documentation here: https://documentation.meraki.com/MX-Z/Networks_and_Routing/Passthrough_Mode_on_the_MX_Security_Appliance_and_Z1_Teleworker_Gateway

MRCUR · ‎Nov 20 2017

Agreed with @Adam suggestion. It sounds like the MX is running in NAT mode and doing exactly what it should be doing.

MRCUR · ‎Nov 5 2017

@MerakiDave Are you Dave S. who works with Matt S.?

MRCUR · ‎Nov 1 2017

Do you have a custom password set at Network Wide - General - Device configuration?

MRCUR · ‎Oct 29 2017

@WadeAlsup This is definitely the closest you'll get for historical average use, but they definitely filter out peak usage in that chart. The chart for one of my MXen shows a peak of about 600Mbps. This may well be the "average" for that MX of the time period, but it regularly goes above 1Gbps and sometimes much higher (upwards of 2.5Gbps).

MRCUR · ‎Oct 28 2017

The recommendation is typically to create a network per location. To keep the configs all in line, you can create an MR template and then bind the template to each of the individual networks. The only networks I use that are not specifically tied to individual locations are Systems Manager network (typically one per org) and MX networks that serve entire orgs (aggregated Internet for entire school district for example).

MRCUR · ‎Oct 26 2017

Open a support case. That's why it's flashing - it's trying to update the firmware. The Dashboard firmware status changes immediately after an update - it's not accurate to what the device is actually doing.

MRCUR · ‎Oct 26 2017

If you go to the local status page, does it say there is an upgrade in progress?

MRCUR · ‎Oct 17 2017

@MikeFromHAVEN I would force the issue then. I'm not sure why they're saying a fan that isn't operating is okay. By the time the switch throws a temp alert, it's too late. I had multiple already dead at that point.

MRCUR · ‎Oct 17 2017

@MikeFromHAVEN If the fan is not operating then the switch absolutely needs replaced. I'd recommend calling Support and requesting an RMA ASAP.

MRCUR · ‎Oct 17 2017

@MikeFromHAVEN I would recommend replacing any switch that isn't running the fan at very close to full speed. If you have any that are cycling between slow/fast, I've seen that become a failure within a week or so.

MRCUR · ‎Oct 17 2017

@MiBob It still applies. See here: https://justworks.ca/blog/what-happened-to-my-vpns-on-windows-72008r2

MRCUR · ‎Oct 17 2017

@MiBob You may need to make the registry change found here: https://support.microsoft.com/en-us/help/926179/how-to-configure-an-l2tp-ipsec-server-behind-a-nat-t-device-in-windows

MRCUR · ‎Oct 16 2017

@Squuiid @MarcoS Agreed! This is really great to see how well prepared Meraki was for this.

MRCUR · ‎Oct 16 2017

@MarcoS Thank you!

MRCUR · ‎Oct 16 2017

@ModulusJoe Was Support suggesting that moving to 24.11 wasn't enough and that disabling 802.11r is ALSO required?

About MRCUR

MRCUR

Community Record

Badges