Meraki

Mosquitar · ‎Sep 15 2022

Hi All, I am aware that it is possible to configure ISE to override the MS port VLAN following successful device authentication ( such as placing computers in the corporate data VLAN if they pass certificate based authentication), however is it also possible to apply an ACL to the session to enforce L3 communication from the computer (similar to how dynamic ACLs/DACLs work with Cisco Catalyst switches)? Thanks

Mosquitar · ‎Apr 5 2022

Thats great, I really appreciate you testing this. Much appreciated!!

Mosquitar · ‎Apr 5 2022

I cant test at the moment as I'm offsite. Looking at the link that you attached, it appears that the Meraki MX will automatically respond with 'Option 3 - Router' using it local IP address, however its not really clear if you can override Option 3 and specify a custom IP address. It looks like this is possible in the dashboard, but I'm not sure if the MX will honour this or if it will override and return its own IP address Has anyone tested this before?

Mosquitar · ‎Apr 5 2022

Hi All, I'm currently configuring an MX Firewall as a DHCP server and cant find an option to change the gateway IP address that DHCP allocates. This is required to support a migration as I want the MX to initially act as a DHCP server for the connected clients but for the clients to use the old firewall that is located on the same VLAN as their default gateway. Example below Old Firewall (Gateway) - 192.168.1.1 New Meraki MX Firewall (DHCP Server) - 192.168.1.2 Clients - 192.168.1.10 - 200 Can I override the DHCP gateway using custom option 3?

Mosquitar · ‎Jan 17 2019

Great, thanks all

Mosquitar · ‎Jan 17 2019

Hi All, This maybe a daft question but are there any issues with changing the name of a live network under Network Wide - General - Network Name? I have been asked to change the name of a combined network but I'm not sure if this causes any brief issues with devices connecting to the dashboard etc. Thanks

Mosquitar · ‎Jan 10 2019

Hi All, I need to replace a failed Meraki switch that is a member of an existing switch stack. I'm going to use the Clone and Replace feature, however, its not clear what is cloned from the failed/source switch to the replacement/destination switch. Are only the switchport settings etc copied or do these have to be manually reconfigured? Are other settings such as management IP address/hostname etc copied or do these have to be manually reconfigured as well? Thanks

Mosquitar · ‎Nov 22 2018

Ok, thanks for the reply. I will keep any eye on this and see if it actually causes an issue as the error is a little confusing.

Mosquitar · ‎Nov 22 2018

Hi All, I'm seeing the alert 'Disabled Switch (BAD DNS)' under the connectivity status on my MS250 switches. This occurs a couple of times a week, however, I dont know why and what the impact is. Does anyone know why this error is produced, and more importantly, what does is mean by 'Disabled Switch'? Does this mean that traffic flow is being impacted? Thank you

Mosquitar · ‎Nov 13 2018

Hi Owen, Ahh yes. I will try and test this when I can. Thank you. Added support for assigning a /31 subnet to the MX’s uplink via the local status page. The IP address assigned to the MX must be the higher of the two available IP addresses in the /31 subnet

Mosquitar · ‎Nov 12 2018

That's a shame, I will need to use /30s instead. Thanks for the response Philip

Mosquitar · ‎Nov 12 2018

Hi All, I cant find an answer to this, but does anyone know if the Meraki MX supports /31 subnets on the WAN uplink interfaces? Thanks

Meraki

Community

About Mosquitar

Mosquitar

Community Record

Badges

Meraki MS with ISE and DACLs

Re: MX Firewall DHCP Custom Default Gateway

Re: MX Firewall DHCP Custom Default Gateway

MX Firewall DHCP Custom Default Gateway

Re: Change network name

Change network name

Switch Stack Clone & Replace

Re: Disabled Switch (BAD DNS)

Disabled Switch (BAD DNS)

Re: Meraki MX /31

Re: Meraki MX /31

Meraki MX /31

Re: Meraki MX /31

MX Firewall DHCP Custom Default Gateway