Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Jeff_Longley
Community Record
53
Posts
33
Kudos
2
Solutions
Badges
Aug 8 2024
1:00 AM
Its more a user problem - If we don't auto launch the client, users don't connect to the VPN and log a ticket. If we DO auto launch, they'll connect VPN when they're on a site that's already connected to our DC, and log a ticket saying everything's really slow.... Groupings and Objects would be great - would be EVEN better if they could be set globally too (much like radius servers).
... View more
Aug 7 2024
5:20 AM
2 Kudos
Honestly, the way things are going with landlord, I'm seriously going with the idea of running our own fibre and just not informing them - so much simpler!
... View more
Aug 7 2024
3:24 AM
Have a new site being commissioned and because of the idiot landlord, my single floor space is two separate rooms being "converted" to a single space. However, the cabling is two separate instances. So, I'll need a switch in Side A and a switch in Side B. not the end of the world, but..... Landlord won't let us run Fibre to connect the switches, as "there's already fibre". Each of the rooms is connected to a Fibre patch panel and can be easily connected together. However, as WE won't have access to that patching, what are my options for securing the switch uplinks?
... View more
Aug 7 2024
3:15 AM
4 Kudos
So, coming full circle, we're fully onboarded and everything is working as it should. We actually had a second onboarding session (after our first one had ended) and it was a much more thorough experience. Is the solution perfect? No Does it work? Yes Things we're still hoping for improvements on. Always on / Auto Sensing VPN. We have endless problems with using connecting the VPN when they're on a MX site. I'd have thought it relatively straight forward to have a either a whitelisted domain suffix or IP range, which tells the client NOT to connect. Bypass rules are still CIDR only and can't be logically grouped (so for example, to Bypass Meraki Dashboard, you can't create a single entity called Meraki Dashboard and add all the IP's in). You add comments either, so looking at the Bypass list to figure what's been done and why is "fun". No auto client update - we have 3rd party solution for updating software, but I'd much prefer if the client can look after itself!
... View more
Nov 17 2023
2:52 AM
But if dnscrypt failed, traffic wouldn't leave the MX and it would be dropped? We had no issue resolving DNS via the autoVPN tunnel, and packet captures showed DNS request going to secure connect.
... View more
Nov 17 2023
12:52 AM
One Step forward, two steps back. So, we've now got our hub enabled for secure connect. Sadly, we haven't got around to doing any testing as we're now battling our spoke sites blocking DNS traffic - ALL DNS traffic, including Umbrella. We notice it first when all the switches/AP's in the site suddenly report that "DNS is misconfigured" - it's not, it just can't talk to the DNS server its configured for. Then the flood of user calls come in. Support confirmed with a packet capture that they can see DNS requests going out, but nothing ever coming back. Quickest fix? Remove secure connect tunnel and everything is restored.
... View more
Oct 24 2023
1:52 AM
Yes, we were told that over a month ago. Latest update is "There were some stability issues with hub connectivity feature last week, so engineering is trying to stabilize it before connecting new customers"
... View more
Oct 19 2023
3:58 AM
3 Kudos
Just updating this: Currently we're stalled on deployment. Hubs are the stumbling block at the moment. Surely I'm not the only customer who wants to be able to route to their datacentres over their Auto-VPN tunnels when clients are in a Meraki site, and VPN into that datacentre when remote? We've also started hitting occasional problems with websites not liking the exit points (XFF header). We've been offered a paid for option where you can reserve IP's in certain regions so that you appear to exit from them. One option would be a local breakout exception, but it only appears to accept CIDR/IP rather than a hostname.
... View more
Aug 24 2023
12:36 AM
That's going to be fun with our users then..... We had to move from a centralised MPLS solution several years ago for similar reasons!
... View more
Aug 23 2023
1:37 AM
So my DC is a MX hub. Hubs do not appear as selections when you create the SecureConnect Tunnels. So all my sites have tunnels to SecureConnect, and tunnels to my DC. However, if I wanted to VPN into my DC, SecureConnect cannot see it because it doesn't have a connection to it.
... View more
Aug 23 2023
1:10 AM
5 Kudos
Thought I'd share some of our experiences with SASE so far. 1. Secure connect breaks dashboard. Not long after implementing secure connect tunnels, our switches went dark - Literally dark. We couldn't see any activity, whether stuff was connected or not. Support initially thought it was a failed switch, but as it was happening in every single site with a secure connect, we disagreed. The solution was to add the dashboard ranges to the VPN exception rules, which brought everything back to life. Have raised with the onboarding team, as it should surely either NOT break dashboard traffic by going through the tunnel, or be an exception by default. The dashboard rules also fixed a problem with Access points complaining about their regulatory domains being incorrect (because they're routing through SecureConnect DC's and appear to have changed country). 2. Hubs not supported We've a fairly classic hub and spoke auto VPN setup at the moment, with our hub site having a VPN concentrator. SASE currently doesn't support hubs. Its apparently coming, but right now, this has stopped our roll out. 3. MTU on VPN tunnels We have some internal security boxes that VPN out of the network to a DC. These broke. The support discovered that the MTU size was set to 1280, which was halting communication. Once again, the fix was to add these to "bypass VPN tunnel" list. The other frustration is that VPN exception rules ONLY (and despite what the GUI says) allows CIDR ranges, not Hostnames. Trying to remain positive, but there seems to be a lack of joined up thinking - The dashboard rules is an absolute own goal. I'm sure I can't be the only company that would like to be able to route traffic over internal VPN's to our DC, rather than through secure connect VPN's to our DC?
... View more
May 23 2023
6:30 AM
2 Kudos
Probably more for the make a wish page, but just wondering if anyone else had found workarounds. We're being asked to save energy - as I'm sure many are. Switching off POE stuff is a nice thing, but we're struggling with a limit of 5 schedules as well as that those schedules can only have a simple on/off time. For example, we'd love to be able to have a four hours on, four hours off schedule for our room booking Ipads (we can't let them go flat, as single app mode still needs someone to press home after a power on). Am I the only one? Any suggestions or work arounds (other than make a wish)?
... View more
Labels:
- Labels:
-
Other
Feb 24 2020
7:37 AM
Don't think it's possible but.... Can Meraki Layer 3 switches have a different default route per Vlan?
... View more
Dec 9 2019
12:32 AM
now thats interesting.... As part of our MDM deployment, we deploy Cisco security (Umbrella) to do DNS filtering... Could be another avenue to investigate.
... View more
Dec 9 2019
12:31 AM
Given that its on Iphones (which don't need a reboot once the app is removed), so far, the MDM agent is looking like the likely problem.
... View more
Dec 6 2019
1:00 AM
Bit of an odd one... Had multiple users tell me Meraki MDM blocks hotel hotspot access. They can connect to the network, but the captive portal page never shows up. I've not seen it personally (have MDM on my phone), but users advise if they delete the system manager app, they can then connect. Anyone heard similar, or know of a fix?
... View more
Labels:
- Labels:
-
Other
Dec 2 2019
7:07 AM
6 Kudos
Doh! Should click around the dashboard a little more.... Found it!
... View more
Dec 2 2019
7:05 AM
Hey there people, Is there a way to have an SSID available during certain times? I realise I could use a port schedule on the switch and power off the AP, but that would bring down ALL SSid's, rather than just one.
... View more
Jun 25 2019
7:41 AM
Just to add to the above: "large PDF files" - well, just how large IS large? Are they printing directly to the printer, or is there a print server involved? Does that printer have any kind of storage? And how much memory does the printer have? My gut feeling, is that this is not a network issue....
... View more
Jun 25 2019
5:46 AM
1 Kudo
So, in the final scenario, I'm assuming it's getting power, just not connectivity? Its it connected to a trunk port?
... View more
Jun 25 2019
5:42 AM
Again, this is not about where they ship from and how quickly it is when they're in stock. We've been a customer for over 5 years and have zero problems previously. This was more a question around how they've managed to have zero stock in the whole of Europe, which given our previous experience, was unnerving.
... View more
Jun 24 2019
2:56 AM
Given that I'm meant to have to an entire new office all patched in by then, it may not be the best of ideas...
... View more
Jun 24 2019
2:37 AM
Yup, all European stocks comes direct from Meraki in the Netherlands. However, they've got none. Our request for an expedited delivery is apparently "sat with senior management in the US at the moment."
... View more
Jun 21 2019
4:01 AM
1 Kudo
Just an update - time seems to be a factor. The process is still long and complicated, but it appears the dashboard can be very inconsistent in displaying correct information. As an example, in the DEP view, devices would show as pushed, whereas in client view, the DEP status would be assigned. 24 hours later, everything seemed to have settled down.
... View more
Jun 21 2019
3:58 AM
well, that's one good thing I suppose. They've known about our order for about a month.... When we placed the order they didn't advise of any stock issues. August isn't going to cut it for us (although we've not even been given a date yet!).
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 2155 | Dec 2 2019 7:07 AM | |
| 11894 | Jun 21 2019 4:01 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 6 | 2155 | |
| 5 | 6238 | |
| 4 | 2682 | |
| 3 | 5802 | |
| 2 | 595 |
© 2024 Cisco Systems, Inc.
