Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Become a member of the Cisco Meraki Community today
Get answers from our community of experts in record time.
Join now- About Cyrus777
About Cyrus777
Cyrus777
Getting noticed
Member since Nov 30, 2023
a week ago
Community Record
34
Posts
7
Kudos
1
Solution
Badges
a week ago
No, actual Ethernet (copper) port. these are used for data center mostly but we use them for SAN connection between VMWare/Hyper-V and SAN storage. 9300 series are good for campus in access layer. they can't handle SAN traffic.
... View more
a week ago
lol my switches are old and close to EOL. I will look into your recommendation. Thanks
... View more
2 weeks ago
Thanks for recommendation. I will need all 48 ports to be Ethernet 10G like Nexus one. Not sure if Meraki has anything similar to that.
... View more
2 weeks ago
Hello friends, I’m looking for a couple of 48-port switches with 10G Ethernet to replace our old Nexus 9K switches currently used for SAN connections between our Hyper-V and VMware hosts and the storage area network. I’d like to configure VSS or some form of high availability (such as stacking) to ensure redundancy between the two switches. Additionally, I need to configure VLANs on these switches without interfering with the rest of the network — the traffic should remain isolated and contained within the two switches. Does Meraki have such switches to be used and configured independently with specific VLANs isolated on them?
... View more
Mar 14 2025
9:01 AM
We have a few offices that we need to have ATA and printer connected to the same switch port on Meraki MS. The port is configured in access mode and allows traffic for VLAN x (data) and VLAN y (Voice). we have the ATA connected to switch port and using the LAN port on the ATA we connect the printer. (ATA must act as a switch to provide network access for printer like an IP phone). Printer has static IP on data VLAN and ATA gets a dynamic IP from DHCP on voice VLAN. the ATA is set to bridge mode. with this setup printer communication is totally lost and ATA does not pass the traffic for data vlan over the built-in switch on the device. If I remove the voice vlan config on the MS port and only have Data VLAN in the config, then both devices are on the same VLAN and the traffic can pass through the ATA built-in switch and they both are happy. The problem is that ATA does not pass the traffic with Data vlan tag if the ATA itself is on voice VLAN. Any idea what must be done on ATA or anywhere else to make this work properly and separate the traffic for printer and ATA on their own VLANs?
... View more
Labels:
- Labels:
-
Other
This was a firmware issue. I had to rollback to an older version on MR and now on 30.7.1 the problem is resolved. I'm waiting for a newer MR version to be released so I can skip MR 31.1.5.1 as this version was the root cause.
... View more
Jan 31 2025
9:10 AM
4 Kudos
@OCTOMG this was what we missed in Umbrella exclusion. I had the domain names in the setting but the reverse zones were missing. Thank you so much for the help.
... View more
Jan 30 2025
12:34 PM
I made changes like disabling/ adding my domain/ adding IP range for my LAN. none of them helped.
... View more
Jan 30 2025
12:19 PM
I have already added my domain to excluded from being routed to Cisco Umbrella section in threat protection. Thanks for the comment
... View more
Jan 30 2025
7:34 AM
yes, all clients are using the same set of servers for DNS. I have a few DNS servers on-prem and on Azure for HA and all clients are using those servers across the org. Also database for all those DNS servers are synced and they all has the same setup.
... View more
Jan 30 2025
7:02 AM
Hello friends. We are having a weird issue in our organization and have not found a solution for it yet. I have DNS server on-prem and on Azure. If a client within the same subnet that DNS servers reside on send a request for reverse, it will work perfectly but all other clients on different subnets or from different routed network on SDWAN Meraki Auto VPN won't be able to get a respond for reverse dns. The forward records are resolved with no issues. We have rebuilt the reverse Zone on DNS and have done a lot of investigation with Meraki support as well but had no chance to find the root cause. we have no rules on MX to kill this traffic but when I did packet capture on a client and dns server I noticed the forward dns queries has a complete communication but the reverse query get lost on Sever end. Any recommendation will be appreciated.
... View more
Labels:
- Labels:
-
Firewall
yes they are all up to date.
... View more
Jan 16 2025
10:34 AM
I have deployed Cisco ISE for our organization only for wireless devices. Now any device that authenticates with ISE will disappear from client list under networkwide. I can see the devices and the SSID that they are connected to under every single MR though just not seeing them under networkwide clients. Also, all authentication steps are going well and I don't see any failures and computers are healthy and working as intended on the new SSID. Any ideas what is missing here?
... View more
Dec 6 2024
8:37 AM
I have the same issue with Meraki/ISE setup. when a windows client tries connect to wifi after reboot automatically the hostname gets "host/xxxx" attached to it but when you connect manually that doesn't happen. I made the above adjustment in advanced setting for ISE but that did not resolve the issue for me and I still see a lot of authentication failure when windows machines are trying to connect automatically when they come up on the network. User must click on SSID to connect and when they do that the host/ is not there anymore
... View more
Aug 5 2024
6:28 AM
Hello friends. I have a single AnyConnect server with SAML setup on one of my MXs in our org. I'm trying to setup the second MX on a different network in a different location for FO and provide the server backup list on AnyConnect profile for end users. I believe to make this work I should create a new Metadata file on my Azure AD with new MX URL and upload it that network. However, Meraki support told me if I upload a new Metadata file to the second MX on a different network it will cause issues for my primary VPN sever. I don't think they are right and there should be a way to do this. Any ideas?
... View more
Labels:
- Labels:
-
Client VPN
Jul 10 2024
11:36 AM
I have a couple MX at my corp and they provide HA with different ISPs. The plan is to provide redundancy for the service at different geographical locations. I have on-perm and Azure resources and using auto-vpn across the org using MX and vMX to provide access to everything evenly across the network for everyone. so here I need to implement the most reliable option based on my features to setup the second node as my client VPN server on a MX in different office or on a vMX on Azure.
... View more
Jul 10 2024
10:18 AM
Hello Community. I have AnyConnect Client VPN setup on my corporate's MX. If we have a power/internet outage at this office all remote workers lose access to our on-perm and cloud resources. I'm trying to find out the best option to provide redundancy for this service on a different MX or (vMX on Azure) in different location so if the primary goes offline for any reason my remote employees still can connect and keep working. I see there is an option for Load sharing between MXs on Meraki documentation. Has anyone here setup such design in the past? is there any good documentation to walk you though setting up the second node without disruption on primary node service? what are your recommendations? Thanks!
... View more
Labels:
- Labels:
-
Client VPN
Jun 11 2024
9:13 AM
I do have site to site VPN across the org and using hub only for mesh. We don't do 1:1 nat though. I saw one site failed due to being spoke after upgrade and I had to make that one hub as well to resolve the issue. Even Meraki support couldn't figure out what caused the issue and I had to roll back on my corp MX that is used for AnyConnect. now with 18.211.2 I'm not feeling confidant to perform the firmware upgrade anymore.
... View more
Jun 7 2024
7:58 AM
I upgraded to this ver and caused too many issues with my AnyConnect Clients so I rolled back. Now we have a new stable release MX 18.211.2 which I'm afraid of doing upgrade again and facing the same issues. Do you guys have tried MX 18.211.2 in prod environment yet? is there any thing we should know before upgrade?
... View more
May 28 2024
7:05 AM
Hello. I am having a hard time to figure out some issues that I have with BYOD single SSID setup for Meraki network on ISE. I have followed this document and video to configure BYOD for our org. I get to the point that I can login with AD user/password and pass the PEAP (EAP-MSCHAPv2) authentication. from this point on Windows devices I get the redirect URL to my ISE and download the NSA successfully but when I try to install the NSA I get an error for untrusted cert and I continue but it fails eventually. For Mac OS ad iOS (iPhone) I download the cert but it doesn't move to next policy to eap-tls. I'm allowing all traffics to ISE / DNS and other required webpages on walled garden on Meraki access control page for this SSID.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 1132 | Feb 4 2025 10:30 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 4 | 3557 | |
| 2 | 1663 | |
| 1 | 1132 |
© 2025 Cisco Systems, Inc.
