Like many companies, Cisco uses cookies and other technologies, some of which are essential to make our website work. Others help us improve services and the user experience or to advertise. In using our site, you consent to the use of these cookies and other technologies. Learn more about cookies and other technologies we use.
- About mat1458
turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
mat1458
Here to help
Member since Oct 23, 2018
11 hours ago
Community Record
12
Posts
2
Kudos
0
Solutions
Monday
Hi Philipp even though in some configuration situations I received error messages about overlapping IP subnets and I was not able to proceed I was able to configure my network in a way to have overlapping IP subnets. This was the case when I added a spoke site that used the pool of IP subnets out of the template. I do not know why the tests work when trying to add a hub site with overlapping IP addresses but not in the case where a spoke site gets an IP address out of the pool. So I think that the best strategy is still to use non-overlapping address spaces for hub and spokes, but that was clear in the first place. Thanks for taking the time for replying my (silly) questions. Matthias
... View more
Thursday
I have understood that for automatic address assignment in Site-to-Site VPN I have to use a template. With it each site gets its own IP addresses from a defined pool. For a hub and spoke network I need to configure the MXs as spokes. the hub site as I see it cannot be part of the template because of the selection of the type "Hub". If I want to select an IP address for a VLAN on the hub out of a range in the template that is used in the spokes: does the dashboard track the used IP subnet so that it is never assigned to a spoke? Or do I have to assign IP addresses in a different IP address range? (reason for asking: FW rules would be easier in general if IP addresses for VLANs with the same purpose could reside in a common address range)
... View more
2 weeks ago
Hi Nolan Thanks for giving me such precise answers to all of my questions, I really appreciate that very much! I have found the Org>Firmware Upgrade page and am already playing around a bit. I let the question on an unsolved state for a little moment, even though you have replied and solved almost all of my questions. Just in case somebody has some more info tho share. I will however put it to solved shortly. Thanks again Mat
... View more
2 weeks ago
I am trying to understand how Meraki handles firmware updates. The documentation on some topics is quite clear, other stuff is a bit difficult to understand. That's why I want to ask a few questions: -Is it true that all devices of the same type (MX, MS, etc.) bound to a network with a template upgrade their firmware at the same time? -Is it true that firmware updates of all types of devices can only be delayed a certain amount of time but not suppressed totally? -When trying to set the date of the firmware update to a date two weeks from now the dashboard tells me that the " Firmware upgrade date must be set in the future ". Bug or feature? Or did I overlook something? In this case it concerns switch software (" New firmware is available for this network. However, an update is not scheduled. ") The date correlates with the Upgrade window that is set above. -The dashboard tells me "Upgrades may be staggered...". Is it true that this feature is in BETA? How do I access it? -For the whole firmware upgrade process: is there any integration in the API planned/already implemented? Any hint or reply is greatly appreciated.
... View more
3 weeks ago
Hi Philipp That's where I expected to see them but it seems that this is for site-to-site AutoVPN type of connections to other MXs only. It seems that apart from the "Test Connectivity" button in the SSID configuration panel there is nothing to show that the connection is working. And the results of "Test connectivity" are not easy to interpret, especially failed ones. But thanks anyway for your answer. Mat
... View more
3 weeks ago
If the MX is the DHCP server the incomplete ARP is not likely to be the issue since the traffic is routed and ARP is only necessary for the default gateway IP address in the local VLAN. It looks to me as if something in the DHCP processing on the client side as gone wrong. Did you do an ipconfig /all (or whatever the OS of the client might need to display the IP config) to see if the DNS servers and the Default Gateway were present in the PC? If everything is/was ok, could/can you ping the DNS server? Are you able to able to ping devices in proximity to the DNS server?
... View more
3 weeks ago
In bridge mode Meraki allows to use VLAN IDs with tags. This gives the possibility to use templates and add the APs to the corresponding tags (and with that to the corresponding VLANs) afterwards. With SSID Tunneling to VPN Concentrator there is a possibility to use VLAN but only a single VLAN can be assigned. I have the need to separate the sites/networks on the central VPN concentrator into one VLAN per site. With the existing configuration logic on the dashboard I have no possibility to do this in a template, resulting in a second network per site only for the access points. I don't want to complain, please don't misunderstand me. But with the extension of the tag concept to the SSID tunnels I see a possibility to allow this configuration in templates as well. And in my opinion this would simplify the configuration overall. Anyway, I can do what I need to do, so I'm happy. Consider my post a a suggestion for future developments.
... View more
3 weeks ago
Another basic question (after having brought up the one armed concentrator with SSID tunnels): Is there any possibility to see how many SSIDs/Access Points have active tunnels to a MX VPN concentrator? I did not find anything in the portal so far, maybe API?
... View more
a month ago
I have a one-armed MX VPN Concentrator that is located in a site that is connected over a network with an MTU of 1440. Is there a way to build a Teleworker VPN solution (MR AccessPoint SSID Tunneling) from other sites to this VPN concentrator? Is there a way to reduce the MTU on the MX or to switch on PMTUD in a way that the MX and the AccessPoint both reduce the size of the IP packets?
... View more
a month ago
1 Kudo
Hi jdsilva Thanks for your reply and sorry for my late reply. That's indeed the way to go, L2TPv3 Tunnels or EoGRE would be others but due to technical restrictions I'll continue with your idea. Cheers mat
... View more
10-23-2018
09:56 AM
I would like to have a WLAN solution in which each site uses a separate VLAN for a specific SSID that is transferred over AutoVPN to a central site. Can I use an MX at the central site that still lets me separate all VLAN from the sites and how would I configure it at the central and remote sites? (Kind of a L2-site-to-site-VPN)
... View more
Latest Tags
No tags yet
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 114 | |
| 1 | 90 |
