Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Cyrus777
Cyrus777
Getting noticed
Member since Nov 30, 2023
yesterday
Community Record
27
Posts
6
Kudos
0
Solutions
Badges
Friday
4 Kudos
@OCTOMG this was what we missed in Umbrella exclusion. I had the domain names in the setting but the reverse zones were missing. Thank you so much for the help.
... View more
Thursday
I made changes like disabling/ adding my domain/ adding IP range for my LAN. none of them helped.
... View more
Thursday
I have already added my domain to excluded from being routed to Cisco Umbrella section in threat protection. Thanks for the comment
... View more
Thursday
yes, all clients are using the same set of servers for DNS. I have a few DNS servers on-prem and on Azure for HA and all clients are using those servers across the org. Also database for all those DNS servers are synced and they all has the same setup.
... View more
Thursday
Hello friends. We are having a weird issue in our organization and have not found a solution for it yet. I have DNS server on-prem and on Azure. If a client within the same subnet that DNS servers reside on send a request for reverse, it will work perfectly but all other clients on different subnets or from different routed network on SDWAN Meraki Auto VPN won't be able to get a respond for reverse dns. The forward records are resolved with no issues. We have rebuilt the reverse Zone on DNS and have done a lot of investigation with Meraki support as well but had no chance to find the root cause. we have no rules on MX to kill this traffic but when I did packet capture on a client and dns server I noticed the forward dns queries has a complete communication but the reverse query get lost on Sever end. Any recommendation will be appreciated.
... View more
Labels:
- Labels:
-
Firewall
2 weeks ago
I have deployed Cisco ISE for our organization only for wireless devices. Now any device that authenticates with ISE will disappear from client list under networkwide. I can see the devices and the SSID that they are connected to under every single MR though just not seeing them under networkwide clients. Also, all authentication steps are going well and I don't see any failures and computers are healthy and working as intended on the new SSID. Any ideas what is missing here?
... View more
Dec 6 2024
8:37 AM
I have the same issue with Meraki/ISE setup. when a windows client tries connect to wifi after reboot automatically the hostname gets "host/xxxx" attached to it but when you connect manually that doesn't happen. I made the above adjustment in advanced setting for ISE but that did not resolve the issue for me and I still see a lot of authentication failure when windows machines are trying to connect automatically when they come up on the network. User must click on SSID to connect and when they do that the host/ is not there anymore
... View more
Aug 5 2024
6:28 AM
Hello friends. I have a single AnyConnect server with SAML setup on one of my MXs in our org. I'm trying to setup the second MX on a different network in a different location for FO and provide the server backup list on AnyConnect profile for end users. I believe to make this work I should create a new Metadata file on my Azure AD with new MX URL and upload it that network. However, Meraki support told me if I upload a new Metadata file to the second MX on a different network it will cause issues for my primary VPN sever. I don't think they are right and there should be a way to do this. Any ideas?
... View more
Labels:
- Labels:
-
Client VPN
Jul 10 2024
11:36 AM
I have a couple MX at my corp and they provide HA with different ISPs. The plan is to provide redundancy for the service at different geographical locations. I have on-perm and Azure resources and using auto-vpn across the org using MX and vMX to provide access to everything evenly across the network for everyone. so here I need to implement the most reliable option based on my features to setup the second node as my client VPN server on a MX in different office or on a vMX on Azure.
... View more
Jul 10 2024
10:18 AM
Hello Community. I have AnyConnect Client VPN setup on my corporate's MX. If we have a power/internet outage at this office all remote workers lose access to our on-perm and cloud resources. I'm trying to find out the best option to provide redundancy for this service on a different MX or (vMX on Azure) in different location so if the primary goes offline for any reason my remote employees still can connect and keep working. I see there is an option for Load sharing between MXs on Meraki documentation. Has anyone here setup such design in the past? is there any good documentation to walk you though setting up the second node without disruption on primary node service? what are your recommendations? Thanks!
... View more
Labels:
- Labels:
-
Client VPN
Jun 11 2024
9:13 AM
I do have site to site VPN across the org and using hub only for mesh. We don't do 1:1 nat though. I saw one site failed due to being spoke after upgrade and I had to make that one hub as well to resolve the issue. Even Meraki support couldn't figure out what caused the issue and I had to roll back on my corp MX that is used for AnyConnect. now with 18.211.2 I'm not feeling confidant to perform the firmware upgrade anymore.
... View more
Jun 7 2024
7:58 AM
I upgraded to this ver and caused too many issues with my AnyConnect Clients so I rolled back. Now we have a new stable release MX 18.211.2 which I'm afraid of doing upgrade again and facing the same issues. Do you guys have tried MX 18.211.2 in prod environment yet? is there any thing we should know before upgrade?
... View more
May 28 2024
7:05 AM
Hello. I am having a hard time to figure out some issues that I have with BYOD single SSID setup for Meraki network on ISE. I have followed this document and video to configure BYOD for our org. I get to the point that I can login with AD user/password and pass the PEAP (EAP-MSCHAPv2) authentication. from this point on Windows devices I get the redirect URL to my ISE and download the NSA successfully but when I try to install the NSA I get an error for untrusted cert and I continue but it fails eventually. For Mac OS ad iOS (iPhone) I download the cert but it doesn't move to next policy to eap-tls. I'm allowing all traffics to ISE / DNS and other required webpages on walled garden on Meraki access control page for this SSID.
... View more
Mar 18 2024
7:06 AM
I'm in the process of setting up access control on Meraki wireless using Enterprise with NPS Radius server. As part of this project I will need to have static IPs on all MRs across the org to add them to my Radius server as RADIUS clients. I'm wondering if there is anyway to make this process easier instead of going to dashboard and changing the IPs to static for every single APs? Any advise is appreciated.
... View more
Feb 22 2024
9:31 AM
I'm setting up vMX Meraki-Azure and adding it to my mesh Auto-vpn as a hub. I set the mode to Passthrough or VPN Concentrator but I'm not sure if I need to configure the client tracking based on MAC or IP. I made a separate vNET on Azure for my transit network that vMX is built on and peered it with my resources vNET. Any advice will be appreciated.
... View more
Feb 19 2024
11:58 AM
there is a pending upgrade but has not been done yet. I don't see any specific event related to SIP. AMP and Blocked categories have been disabled for IP phones.
... View more
Feb 19 2024
11:43 AM
we haven't update the MX yet and yes, they have been working before with the same setup with Meraki MX in place. I'm not sure about how to turn off concurrent registrations but I have rebooted all the phones at the same time for new registration and fresh network config but it doesn't help. I have whitelisted all the phones and disabled the security features on firewall for all of them. We have no blocker as far as I can see. The phone company is blaming on PAT function on Meraki appliance but I have nothing configured for NAT/PAT on the dashboard.
... View more
Feb 19 2024
10:43 AM
We have a MX84 at an office with YEALINK phones. Recently the phones started acting weird and we get a lots of call disruptions and phones not ringing. We opened a case with voip service provider and they see clients get registered with a few different port numbers and have a few active sessions at their end. They are blaming our MX that it sends the sip traffic on several different port numbers for one client and causing the issue. How do we force the MX to not assign more than one port number to each IP phones for SIP?
... View more
Jan 18 2024
9:11 AM
I totally understand this. but document tells me to create a subnet as SD-WAN under the same vNET and deploy the vmx on that subnet. so I did. I could go with a different subnet outside my vNET-MERAKI to deploy my vmx and no issues. I worried it might not work as expected if I don't follow the doc.
... View more
Jan 18 2024
9:02 AM
so I have a /24 for my Meraki vNET (which is a test vNET works as my resource location on Azure) and I dedicated a /25 subnet under this vNET (not production) that I used it for my vmx deployment to have both under the same vNET based on document.
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 4 | 98 | |
| 2 | 991 |
© 2025 Cisco Systems, Inc.
