Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Cyrus777
Community Record
18
Posts
2
Kudos
0
Solutions
Badges
2 weeks ago
I have the same issue with Meraki/ISE setup. when a windows client tries connect to wifi after reboot automatically the hostname gets "host/xxxx" attached to it but when you connect manually that doesn't happen. I made the above adjustment in advanced setting for ISE but that did not resolve the issue for me and I still see a lot of authentication failure when windows machines are trying to connect automatically when they come up on the network. User must click on SSID to connect and when they do that the host/ is not there anymore
... View more
Aug 5 2024
6:28 AM
Hello friends. I have a single AnyConnect server with SAML setup on one of my MXs in our org. I'm trying to setup the second MX on a different network in a different location for FO and provide the server backup list on AnyConnect profile for end users. I believe to make this work I should create a new Metadata file on my Azure AD with new MX URL and upload it that network. However, Meraki support told me if I upload a new Metadata file to the second MX on a different network it will cause issues for my primary VPN sever. I don't think they are right and there should be a way to do this. Any ideas?
... View more
Labels:
- Labels:
-
Client VPN
Jul 10 2024
11:36 AM
I have a couple MX at my corp and they provide HA with different ISPs. The plan is to provide redundancy for the service at different geographical locations. I have on-perm and Azure resources and using auto-vpn across the org using MX and vMX to provide access to everything evenly across the network for everyone. so here I need to implement the most reliable option based on my features to setup the second node as my client VPN server on a MX in different office or on a vMX on Azure.
... View more
Jul 10 2024
10:18 AM
Hello Community. I have AnyConnect Client VPN setup on my corporate's MX. If we have a power/internet outage at this office all remote workers lose access to our on-perm and cloud resources. I'm trying to find out the best option to provide redundancy for this service on a different MX or (vMX on Azure) in different location so if the primary goes offline for any reason my remote employees still can connect and keep working. I see there is an option for Load sharing between MXs on Meraki documentation. Has anyone here setup such design in the past? is there any good documentation to walk you though setting up the second node without disruption on primary node service? what are your recommendations? Thanks!
... View more
Labels:
- Labels:
-
Client VPN
Jun 11 2024
9:13 AM
I do have site to site VPN across the org and using hub only for mesh. We don't do 1:1 nat though. I saw one site failed due to being spoke after upgrade and I had to make that one hub as well to resolve the issue. Even Meraki support couldn't figure out what caused the issue and I had to roll back on my corp MX that is used for AnyConnect. now with 18.211.2 I'm not feeling confidant to perform the firmware upgrade anymore.
... View more
Jun 7 2024
7:58 AM
I upgraded to this ver and caused too many issues with my AnyConnect Clients so I rolled back. Now we have a new stable release MX 18.211.2 which I'm afraid of doing upgrade again and facing the same issues. Do you guys have tried MX 18.211.2 in prod environment yet? is there any thing we should know before upgrade?
... View more
May 28 2024
7:05 AM
Hello. I am having a hard time to figure out some issues that I have with BYOD single SSID setup for Meraki network on ISE. I have followed this document and video to configure BYOD for our org. I get to the point that I can login with AD user/password and pass the PEAP (EAP-MSCHAPv2) authentication. from this point on Windows devices I get the redirect URL to my ISE and download the NSA successfully but when I try to install the NSA I get an error for untrusted cert and I continue but it fails eventually. For Mac OS ad iOS (iPhone) I download the cert but it doesn't move to next policy to eap-tls. I'm allowing all traffics to ISE / DNS and other required webpages on walled garden on Meraki access control page for this SSID.
... View more
Mar 18 2024
7:06 AM
I'm in the process of setting up access control on Meraki wireless using Enterprise with NPS Radius server. As part of this project I will need to have static IPs on all MRs across the org to add them to my Radius server as RADIUS clients. I'm wondering if there is anyway to make this process easier instead of going to dashboard and changing the IPs to static for every single APs? Any advise is appreciated.
... View more
Feb 22 2024
9:31 AM
I'm setting up vMX Meraki-Azure and adding it to my mesh Auto-vpn as a hub. I set the mode to Passthrough or VPN Concentrator but I'm not sure if I need to configure the client tracking based on MAC or IP. I made a separate vNET on Azure for my transit network that vMX is built on and peered it with my resources vNET. Any advice will be appreciated.
... View more
Feb 19 2024
11:58 AM
there is a pending upgrade but has not been done yet. I don't see any specific event related to SIP. AMP and Blocked categories have been disabled for IP phones.
... View more
Feb 19 2024
11:43 AM
we haven't update the MX yet and yes, they have been working before with the same setup with Meraki MX in place. I'm not sure about how to turn off concurrent registrations but I have rebooted all the phones at the same time for new registration and fresh network config but it doesn't help. I have whitelisted all the phones and disabled the security features on firewall for all of them. We have no blocker as far as I can see. The phone company is blaming on PAT function on Meraki appliance but I have nothing configured for NAT/PAT on the dashboard.
... View more
Feb 19 2024
10:43 AM
We have a MX84 at an office with YEALINK phones. Recently the phones started acting weird and we get a lots of call disruptions and phones not ringing. We opened a case with voip service provider and they see clients get registered with a few different port numbers and have a few active sessions at their end. They are blaming our MX that it sends the sip traffic on several different port numbers for one client and causing the issue. How do we force the MX to not assign more than one port number to each IP phones for SIP?
... View more
Jan 18 2024
9:11 AM
I totally understand this. but document tells me to create a subnet as SD-WAN under the same vNET and deploy the vmx on that subnet. so I did. I could go with a different subnet outside my vNET-MERAKI to deploy my vmx and no issues. I worried it might not work as expected if I don't follow the doc.
... View more
Jan 18 2024
9:02 AM
so I have a /24 for my Meraki vNET (which is a test vNET works as my resource location on Azure) and I dedicated a /25 subnet under this vNET (not production) that I used it for my vmx deployment to have both under the same vNET based on document.
... View more
Jan 18 2024
8:40 AM
I'm setting up a vMX to connect to our Azure resources following this doc: https://documentation.meraki.com/MX/MX_Installation_Guides/vMX_Setup_Guide_for_Microsoft_Azure I picked a subnet within the vNET that my resources are located on for my Meraki vMX when I created on Azure but I get this warning on Meraki vNET address space: "Address space 'x.x.x.x/x' overlaps with address space 'x.x.x.x/x' of virtual network 'vNET-Meraki'. Virtual networks with overlapping address space cannot be peered. If you intend to peer these virtual networks, change address space 'x.x.x.x/x'. The document mentions that I need to deploy my Azure vMX on same vNET but different subnet that prod. so I did. Any ideas what i'm missing here? should I create this VMX in a totally different address space?
... View more
Nov 30 2023
6:32 AM
we are planning to move from network access with pre-shared key to wpa-enterprise with meraki cloud authentication across a midsize company. I would like to get some guidance if someone has already done this. TY
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 800 |
© 2024 Cisco Systems, Inc.
