Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Become a member of the Cisco Meraki Community today
Get answers from our community of experts in record time.
Join now- About Cyrus777
About Cyrus777
Cyrus777
Getting noticed
Member since Nov 30, 2023
2 weeks ago
Community Record
40
Posts
12
Kudos
2
Solutions
Badges
2 weeks ago
do you have any documentation that I can use to set this up for Meraki specifically? I think I need to setup this Linux on a VM inside my network behind the Meraki MX is that correct?
... View more
2 weeks ago
Hello All, I am setting up an IPsec VPN peer on a Meraki Site-to-Site VPN with a non-Meraki third-party firewall. They require us to use a 172.x.x.x subnet as our private network, and I need to translate our internal 10.x.x.x IPs over the VPN tunnel. Since Meraki does not support 1:1 NAT on IPsec to translate specific IPs for communication with the external party, what options do we have to accommodate this requirement without disrupting communication on our organization’s existing subnet?
... View more
Labels:
- Labels:
-
3rd Party VPN
Nov 11 2025
6:54 AM
5 Kudos
I found my answer. If someone else come across the same issue look into this document. MX67 LSP is not loading normally over auto VPN. we must add port ":8092" at the end of URL from now on. https://documentation.meraki.com/Platform_Management/Troubleshooting_and_Support/Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page#MX_Series_with_Single_Dedicated_WAN_Link
... View more
Nov 11 2025
5:43 AM
Yes it is. As I mentioned all networks are bound to template and they have identical configuration.
... View more
Nov 10 2025
2:06 PM
I’m having difficulty accessing the local status page on the MX67 across my organization. All other MX models are accessible without issues. Current version: MX 19.1.11 I have several MX models deployed across my organization, and only the MX67 is behaving oddly. I’ve been using the management VLAN interface IP address to access the web interface of the MX units, and all offices are bound to the same template with identical VLAN and firewall configurations. Do you have any ideas on what might be wrong with the MX67 LSP?
... View more
Labels:
- Labels:
-
Other
Oct 22 2025
5:39 AM
No, actual Ethernet (copper) port. these are used for data center mostly but we use them for SAN connection between VMWare/Hyper-V and SAN storage. 9300 series are good for campus in access layer. they can't handle SAN traffic.
... View more
Oct 21 2025
1:07 PM
lol my switches are old and close to EOL. I will look into your recommendation. Thanks
... View more
Oct 20 2025
1:37 PM
Thanks for recommendation. I will need all 48 ports to be Ethernet 10G like Nexus one. Not sure if Meraki has anything similar to that.
... View more
Oct 20 2025
1:30 PM
Hello friends, I’m looking for a couple of 48-port switches with 10G Ethernet to replace our old Nexus 9K switches currently used for SAN connections between our Hyper-V and VMware hosts and the storage area network. I’d like to configure VSS or some form of high availability (such as stacking) to ensure redundancy between the two switches. Additionally, I need to configure VLANs on these switches without interfering with the rest of the network — the traffic should remain isolated and contained within the two switches. Does Meraki have such switches to be used and configured independently with specific VLANs isolated on them?
... View more
Mar 14 2025
9:01 AM
We have a few offices that we need to have ATA and printer connected to the same switch port on Meraki MS. The port is configured in access mode and allows traffic for VLAN x (data) and VLAN y (Voice). we have the ATA connected to switch port and using the LAN port on the ATA we connect the printer. (ATA must act as a switch to provide network access for printer like an IP phone). Printer has static IP on data VLAN and ATA gets a dynamic IP from DHCP on voice VLAN. the ATA is set to bridge mode. with this setup printer communication is totally lost and ATA does not pass the traffic for data vlan over the built-in switch on the device. If I remove the voice vlan config on the MS port and only have Data VLAN in the config, then both devices are on the same VLAN and the traffic can pass through the ATA built-in switch and they both are happy. The problem is that ATA does not pass the traffic with Data vlan tag if the ATA itself is on voice VLAN. Any idea what must be done on ATA or anywhere else to make this work properly and separate the traffic for printer and ATA on their own VLANs?
... View more
Labels:
- Labels:
-
Other
This was a firmware issue. I had to rollback to an older version on MR and now on 30.7.1 the problem is resolved. I'm waiting for a newer MR version to be released so I can skip MR 31.1.5.1 as this version was the root cause.
... View more
Jan 31 2025
9:10 AM
4 Kudos
@OCTOMG this was what we missed in Umbrella exclusion. I had the domain names in the setting but the reverse zones were missing. Thank you so much for the help.
... View more
Jan 30 2025
12:34 PM
I made changes like disabling/ adding my domain/ adding IP range for my LAN. none of them helped.
... View more
Jan 30 2025
12:19 PM
I have already added my domain to excluded from being routed to Cisco Umbrella section in threat protection. Thanks for the comment
... View more
Jan 30 2025
7:34 AM
yes, all clients are using the same set of servers for DNS. I have a few DNS servers on-prem and on Azure for HA and all clients are using those servers across the org. Also database for all those DNS servers are synced and they all has the same setup.
... View more
Jan 30 2025
7:02 AM
Hello friends. We are having a weird issue in our organization and have not found a solution for it yet. I have DNS server on-prem and on Azure. If a client within the same subnet that DNS servers reside on send a request for reverse, it will work perfectly but all other clients on different subnets or from different routed network on SDWAN Meraki Auto VPN won't be able to get a respond for reverse dns. The forward records are resolved with no issues. We have rebuilt the reverse Zone on DNS and have done a lot of investigation with Meraki support as well but had no chance to find the root cause. we have no rules on MX to kill this traffic but when I did packet capture on a client and dns server I noticed the forward dns queries has a complete communication but the reverse query get lost on Sever end. Any recommendation will be appreciated.
... View more
Labels:
- Labels:
-
Firewall
yes they are all up to date.
... View more
Jan 16 2025
10:34 AM
I have deployed Cisco ISE for our organization only for wireless devices. Now any device that authenticates with ISE will disappear from client list under networkwide. I can see the devices and the SSID that they are connected to under every single MR though just not seeing them under networkwide clients. Also, all authentication steps are going well and I don't see any failures and computers are healthy and working as intended on the new SSID. Any ideas what is missing here?
... View more
Dec 6 2024
8:37 AM
I have the same issue with Meraki/ISE setup. when a windows client tries connect to wifi after reboot automatically the hostname gets "host/xxxx" attached to it but when you connect manually that doesn't happen. I made the above adjustment in advanced setting for ISE but that did not resolve the issue for me and I still see a lot of authentication failure when windows machines are trying to connect automatically when they come up on the network. User must click on SSID to connect and when they do that the host/ is not there anymore
... View more
Aug 5 2024
6:28 AM
Hello friends. I have a single AnyConnect server with SAML setup on one of my MXs in our org. I'm trying to setup the second MX on a different network in a different location for FO and provide the server backup list on AnyConnect profile for end users. I believe to make this work I should create a new Metadata file on my Azure AD with new MX URL and upload it that network. However, Meraki support told me if I upload a new Metadata file to the second MX on a different network it will cause issues for my primary VPN sever. I don't think they are right and there should be a way to do this. Any ideas?
... View more
Labels:
- Labels:
-
Client VPN
Jul 10 2024
11:36 AM
I have a couple MX at my corp and they provide HA with different ISPs. The plan is to provide redundancy for the service at different geographical locations. I have on-perm and Azure resources and using auto-vpn across the org using MX and vMX to provide access to everything evenly across the network for everyone. so here I need to implement the most reliable option based on my features to setup the second node as my client VPN server on a MX in different office or on a vMX on Azure.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 1165 | Nov 11 2025 6:54 AM | |
| 1344 | Feb 4 2025 10:30 AM |
My Top Kudoed Posts
© 2025 Cisco Systems, Inc.
