Is there a way in Meraki events to know whether the failover was hard or soft?  ... View more

And what is expiry time? and how long ? 5 minutes? so if preferred uplink fails still all existing traffic will use it i.e. no connection to internet till "expiry" i.e. no internet connectivity for 5 minutes?        ... View more

Checking with AWS it is identified that there are EC2 instances from some account which have theses ips.AWS cannot reveal the account holder or their location as per their policy. I have blocked the  xxx.xxx.xxx.xxx/32 public ip in layer 7 rules (ip range section) but still see traffic visible on WAN internet pcap capture on Meraki Dashboard. How else could I block "Internet Protocol Version 4, Src: ec2-xxx.xxx.xxx.xxx.us-east-2.compute.amazonaws.com from hitting our MX. We do not have advanced security features option. ... View more

LAN side did not show any AWS public ip.I am checking with AWS support and will update this thread. ... View more

Thanks for the info so far, I did check with Meraki Support and was told the public IP mentioned was not used by Meraki in AWS. Will check with AWS support. ... View more

I was wondering could get some advice from the forum on probably some AWS Direct Connect connection or if anyone has seen this before. I think if you don't have an answer it's better to keep shut than advising to open a support case. ... View more

ok, so still no optical stats in Meraki? Any way to get it through API calls? ... View more

No firmware upgrade on the Mx or the switches connected. Current version MX16.16. Have not noticed it ever since it occurred last. ... View more

  I think our MX appliance when running its algorithm for load balancing between WAN 1 and WAN 2 to decide which device uses which uplink connection is leading to a latency spike. ... View more

oh yes, thanks. They are filling up the VM storage fairly quickly. ... View more

@GIdenJoe I installed rsyslog on an ubuntu VM but seems like its giving info which could be found in Meraki dashboard Event log. I am using tail -f /var/log/syslog to see the event messages.   your syslog extract has more details. ... View more

I actually removed below from the config file and logs are being received fine now. -$template remote-incoming-logs,"/var/log/%HOSTNAME%/%PROGRAMNAME%.log" *.* ?remote-incoming-logs ... View more

I actually removed below from the config file and logs are being received fine now. -$template remote-incoming-logs,"/var/log/%HOSTNAME%/%PROGRAMNAME%.log" *.* ?remote-incoming-logs ... View more

Attached image shows various other files/directories. Name of the server is syslog. Still unable to get any logs out of Meraki.   ... View more

@PhilipDAth  Sorry for asking a rather Linux question than a Meraki one but unable to get any syslog info on the rsyslog server installed on ubunto server. Below are the details of the config file.   I am trying to run commands like cat /var/log/messages and tail -f /var/log/messages to get logs from Meraki network.     # /etc/rsyslog.conf Configuration file for rsyslog. # # For more information see # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html # # Default logging rules can be found in /etc/rsyslog.d/50-default.conf ################# #### MODULES #### ################# module(load="imuxsock") # provides support for local system logging module(load="immark") # provides --MARK-- message capability # provides UDP syslog reception module(load="imudp") input(type="imudp" port="514") # provides TCP syslog reception module(load="imtcp") input(type="imtcp" port="514") $template remote-incoming-logs,"/var/log/%HOSTNAME%/%PROGRAMNAME%.log" *.* ?remote-incoming-logs & ~ # provides kernel logging support and enable non-kernel klog messages module(load="imklog" permitnonkernelfacility="on")   ########################### #### GLOBAL DIRECTIVES #### ########################### # # Use traditional timestamp format. # To enable high precision timestamps, comment out the following line. # $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat # Filter duplicated messages $RepeatedMsgReduction on # # Set the default permissions for all log files. # $FileOwner syslog $FileGroup adm $FileCreateMode 0640 $DirCreateMode 0755 $Umask 0022 $PrivDropToUser syslog $PrivDropToGroup syslog # # Where to place spool and state files # $WorkDirectory /var/spool/rsyslog # # Include all config files in /etc/rsyslog.d/ # $IncludeConfig /etc/rsyslog.d/*.conf ... View more

So, on Uplink Latency page of MX 250 if destination is a google DNS server i.e 8.8.8.8 and we see latency spike on both carriers, is it due ICMP packets unable to hit DNS server? ... View more

Definitely, will setup port mirroring on MS switch and run pcap captures continuously. ... View more

Thanks much for your thoughts and information. Yes, I do not see a way yet of confirming which device would be using which Uplink WAN connection with load balancing enabled. Would be handy to know though. ... View more

Thank you very much team Meraki. ... View more

@ewcs our setup does not have Advanced Security License so cannot see this Threat Protection>Intrusion detection and prevention but still get these latency spikes time to time on both ISPs at the same time. Definitely a Meraki issue rather than ISPs. ... View more

@finzwake we are running on version 16 as well. But, have not done a reboot in a while. CPU utilization has been been below 50% even during high upstream traffic. ... View more