Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About MirzaDz
About MirzaDz
Community Record
30
Posts
6
Kudos
0
Solutions
Badges
Sunday
I want active-active VPN from spoke with ISP1 and ISP2 on HUB location. I want some traffic from branch sent to the HUB via ISP1, and other traffic from branch sent to the HUB via ISP2 if this is possible.
... View more
a week ago
Hello, Thank you for your answer and explanation. Most of our traffic has direction from spokes to Hub. So if i understand you good, if we want that traffic from 10 network to 20 (on topology above from spoke to Hub ) go through autovpn tunnel 1 we need to create sd-wan policy--vpn traffic on Hub in oposite director from 20 to 10 and choose isp1 as exit point? Is there any place on Meraki dashboard that we can confirm this behavior? Best regards,
... View more
a week ago
Hello, I have scenario like on picture below: So like you see we only have 2 different ISP on Hub/central location but only 1 ISP on spoke location. Is it possible to bring 2 autoVPN tunnel from Spoke Wan1 interface and play with sd-wan policises for vpn traffic? For example from 10 network to 20 go through autovpn tunnel 1, and from 10 to 30 through autovpn tunnel 2 and also one will be redundant to the other. For now i dont see option in sd-wan policy--vpn traffic that we can choose autovpn tunnel, only exit interface (WAN 1 and WAN 2). Does anyone have experience with this scenario with MXs firewalls? Best regards,
... View more
2 weeks ago
Hello, Ok, but MX1 lose LAN connections to the stack. So traffic from client pointing on LAN virtual MAC address doesnt have path to the MX1 if i understand good.
... View more
2 weeks ago
Hello, Thank you for your answer. So if i understand good, secondary MX2 will start to answer on LAN virtual MAC address even it is in spare state?
... View more
2 weeks ago
Hello, Need a little clarification regarding this please . If i provide directly path for VRRP on LAN 3 on both MXs (LAN 1 and LAN2 connected to the stack), when LAN 1 and LAN 2 is disconnected VRRP message will flow through LAN 3 and how failover in this case will be triggered?
... View more
2 weeks ago
Hello, I agree with designs for 2 simultaneouse failures. But in theory it is possible. Anyway maybe some people have just 1 switch for lan communication maybe in that case have more sense and want to avoid STP so they connect just one link.. Anyway when this scenario happend in the portal both HA member becomes muster.Spare member starty to reply on his LAN interface, but spoke communication going through AutoVPN stopped working when this happend (active lose LAN connections).
... View more
2 weeks ago
Hello, Yes i have redundant links, but unplugg both lan links, and the situatiom is like i described above. Both mx is master because both have access to cloud, only one mx lose its lan cables. I am courios if there is mechanisam if lan communication is down,that mx goes in standby instead staying in master state
... View more
2 weeks ago
Hello, Yes ,i know troubleshooting and i know that spare doesnt recieve vrrp message. I know regarding design but what i want to say if lan connection on primary mx fail, or switch or switches where primary connected, we dont have full failover. In the docuemntation it says when stop recieving heartbeats it will become active. It still becomes active, but also active one stays active because it has wan online. If i need to explain more please let me know
... View more
2 weeks ago
Hello, We have 2 MXs in Warm Spare. Each MX has connection to ISP-1, and both MXs can talk on LAN. When i unplug LAN cable on primary MX, secondary stop recieving VRRP message and promote himslef as active/master. He continue to processing LAN traffic but it doesn process WAN traffic. Primary MX still have WAN connection so i have in dashboard 2 masters and problem with connection coming from outside. Does anyone know why MX failover full so secondary take response for Lan and Wan traffic? Can you give some advices? Best regards,
... View more
2 weeks ago
Hello, Ok so the main reason is to avoid creating static routes on our Hub and our L3 switch if i udnerstand good? Is there anything else maybe?
... View more
2 weeks ago
Hello, We have enviroment where we have one Hub connected to L3 switch and behind that L3 is our networks which needs to be accessible from spokes. We have also couple of spokes. We have couple of static routes on hub pointing on l3 switch, and from l3 switch we have one summary route to spokes pointing on hub. Through local networks config section we enabled network for autovpn. I am curious why maybe we could replace this with running BGP on autovpn and BGP between Hub and L3 switch or OSPF ? I know that if we add spoke that network of new spoke will be automaticly advertised to the hub and l3 switch, and also if we add or remove some network behind l3 switch the same will be advertised to the hub and spokes. Is there some other benefit or is there some scenario where we can get benefit?Does anyone have experience or any advice regarding this case? Best regards,
... View more
2 weeks ago
2 Kudos
Hello, I am full admin of both organization. It seems like Jimmy posted document that i can transfer myself half of license thorugh licence history like in this document described: https://documentation.meraki.com/General_Administration/Licensing/How_to_do_a_License_Transfer_in_Cotermination
... View more
2 weeks ago
2 Kudos
Hello, It seems you are right but just to confirm one more time before tomorow transfer. So if i apply license key which consist of 50 MX 68 Advanced Security License in Organization A, i can than click in history on move button and transfer to my another Organization B 25 license? Also just to inform you that i will not add device to Organization A and B before i arrange licences between organizations.
... View more
2 weeks ago
2 Kudos
So if i have in organization applied licence and that licence covers 50 MX 68 devices for example, and created another organization via same mail domain i can transfer for example 20 licence for 20 MX 68 which will be added to another organization? Is there somewhere documentation about that process and steps ? Thank you
... View more
2 weeks ago
Hello, I created 2 organization with same mail domain. Every organization has own network/sites. Every organization has their own number of devices but my licence is complete number of devices in both organization.
... View more
2 weeks ago
Hello,for example i have 1 licence for 50 mx devices. If i move to another organization will it move licence for 50 devices or i can say move 25 licence on another organization?
... View more
2 weeks ago
From the scratch i want to separate company in 2 organization. I created under same mail 2 organizations called different but now i am now sure about applying licence because have 1 license key for device belonging to both organization
... View more
2 weeks ago
Hello, Maybe the question is not for this section but i will try. We have one company which need to be organized in two separate organization in meraki dashboard. Every organization will have admins who manage organization, some admins will manage both. Regarding the licensing, can we apply same licence key on both organization and licence will be used by both organization, or we need to separate licence and apply different license key regarding the organization. Thank you, best regards,
... View more
a month ago
Hello, Thank you for your help and advices. What if we have more than one isp on edge firewall? Also can i get advice regarding what i wrote above(routed mode and bgp is it possible) Thank you one more time
... View more
a month ago
Hello, Have firewall but it is way more complicated to NAT to the MX in armed mode. Plan is to use routed mode, directly connecting to the ISPs. Spokes will access resource over vpn, and accessing internet using DIA and using some SD-wan feature to meassure qos over vpns and load balance traffic. So i guess i can choose routed mode with BGP settings on vpn tunnel between hub and spokes, and with hub and l3 switches, because ospf will not learn route from l3 switches, it will just advertise. Did i understand correctly? Thank you, Best regards
... View more
a month ago
Hello, Planning to implement MX on the HQ/DC where is resources of company. Spoke location will route traffic destinated to private resource over vpn and communicate to the internet directly. MX on HQ will be connect to L3 switches. Plan is that L3 switches recieves route via OSPF from MX and also send routes/network from L3 switch to HQ MX and than finnaly to the spoke. On the spoke location plan is use routed mode, but what is advice for choosing mode for MXs in HQ (vpn concentrator or routed mode). Asking this because of some OSPF limitation. MXs on HQ location will be in HA. Does anyone have some advices or experience ? Thank you, Best regards,
... View more
My Top Kudoed Posts
© 2024 Cisco Systems, Inc.
