About tantony

Cerro

if you can nslookup the server by specifying your dns server(nslookup DestIPaddress DNSIPaddress) ,then this is the solution that works best for me: https://www.reddit.com/r/meraki/comments/arkviy/client_vpn_and_local_dns/ We had this problem with some Win10 clients, and the only workaround we've found so far is to statically set the Interface Metric value on the VPN adapter to a lower number than the local adapter, so that it uses the DNS server set on the VPN interface for name lookups. If there's a better way to handle this, I'd love to hear it. This is under the vpn adapter networking IPV4 properties advanced options. Turn off IPV6 there as well.

JesusConejo

https://www.youtube.com/watch?v=qqcC1aiGj0s

cmr · ‎12-16-2021

If it is only employees then I'd say it isn't a major issue, but if it is the public then it would be better to disable it unless you need it.

CptnCrnch · ‎12-07-2021

I guess the best you can say about NPS and Azure MFA is that it's "free" in its most basic form. Whenever you really want tio achieve something, MS urges you to buy something on top. At that point of time latest, please take a look at how things are being handled in the MS universe related to Cisco Duo. Perhaps there are folks out there who're brainwahsed enough to like the Azure MFA, Defender etc. Duo pleases with wonderful simplicity. Exactly like Meraki does. 😉

PhilipDAth · ‎11-03-2021

> Windows Hello for Business does support MFA, in that it takes 2 factors to set it up. If uses MFA for device enrollment. Beyond that, it does not use MFA. For example, you can not protect a Windows 10 workstation using Microsoft Authenticator - a second authentication source. Allowing only a single authentication method - such as PIN - is not two-factor authentication. It is no better than a password, and in many cases worse, since a PIN is typically weaker than a password.

M_Mining · ‎09-06-2021

Happy Birthday!!!

DHAnderson · ‎09-01-2021

It has come back up for me now. It must be transient issues and it has happened a couple of times now.

tantony · ‎08-30-2021

Love to hear if anyone is using 802.1X on their network also.

cmr · ‎08-11-2021

Please see this Cisco solutions document including case studies of mining installations: https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/Industrial_Automation/IA_Verticals/Mining/Mining1_5/IA-Mining-DG/IA-Mining-DG.html

onkar1989 · ‎08-03-2021

Congrats to all the winners and well done to everyone who participated!

tantony · ‎07-29-2021

@KarstenI Thank you

tantony · ‎07-26-2021

@rymiles The only time I only had single VLANs was may be years ago when It was out of the box. May be I didn't notice VLAN 0 before, but I only noticed it after adding VLAN 10. I had VLANs 2-4 a long time ago and I don't recall ever seeing a VLAN 0

tantony · ‎07-15-2021

https://www.arin.net/reference/research/statistics/address_filters/ May be this is the reason: In August 2012, ARIN began allocating “172” address space to internet service, wireless, and content providers. There have been reports from the community that many network operators are denying access to devices having IP addresses from within the entire 172 /8 range. As a result, any device with a 172.x.x.x IP address may have difficulty reaching some sites on the global Internet. The only way to solve this problem is for those operators to reconfigure their routers or firewall access controls and filter only address space from the 172.16.0.0/12 range.

Uberseehandel · ‎07-04-2021

@Nash Sorry I never got back to you I disappeared into hospital(again) contemporaneously with your post, and it slipped between the lines, as it were.

CptnCrnch · ‎05-17-2021

Completely dependent on the network device. Most of them will query the first RADIUS server and fall back to the second one in case the first is not reachable / takes too long to answer. If you want load sharing, you'd stick to an external load balancer.

tantony · ‎03-26-2021

I only had issue with this user. These are the things I tried, I'm not sure which one fixed it. He was able to login to the VPN from iPhone or iPad, but not from a Windows device. So I assumed it was a Windows problem. Manually created the user profile in RADIUS server Logged in as the user while signed in as Administrator (ran notepad as the user) on the RADIUS serve I'm not sure if any of these was the solution, but when I did these steps above, he was able to login from his Windows

CptnCrnch · ‎03-16-2021

Would make sense: you won‘t notice any traffic interruptions even when your Meraki device is not able to reach the Dashboard. Well, sort of, but definitely not for such a small time frame. Further info here: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Behavior_during_Connection_Loss_to_Cisco_Meraki_Cloud

tantony · ‎02-26-2021

hope this helps https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/VoIP_on_Cisco_Meraki%3A_F.A.Q._and_Troubleshooting_Tips

UCcert · ‎10-13-2020

More than likely your ISP if the device suddenly unregisters and alerts.

tantony · ‎10-05-2020

Thanks for the reply

tantony · ‎08-31-2020

@BrandonS Thanks, I didn't bother to check there. But good to know, thanks

cmr · ‎07-19-2020

@PhilipDAth the MS120-8 and 8LP use the 1U RM-CI-T3 as below: The manufacturer website page is at https://www.rackmount.it/products/regulars/cisrack/rm-ci-t3.html The MS120-8FP has 1.3/2U kit, part number RM-CI-T7 and is as below: All of the small MSs and MXs have rackmount kits and they are good, we have used them for a few years now.

OswaldoEcuador · ‎06-11-2020

Hola Tony!!! Saludos desde Ecuador..y que viva el rock!!! Saludos

KRobert · ‎04-24-2020

Welcome to the community! I hope Victoria, BC has been a nice change of pace for you.

KRobert · ‎04-24-2020

Welcome to the community!

tantony

Community Record

Badges

Re: Meraki dns issue

Re: Client VPN and user permissions

Re: MX device local status page

Re: Client VPN 2FA with MFA extension for NPS

Re: Meraki client VPN 2FA

Re: 🎁 🍰 🎈 Happy 4th Birthday, Meraki Community! 🎈 🍰 🎁

Re: Dashboard Issues?

Re: Dynamic ARP Inspection (DAI)

Re: WiFi router or Access Point for use in tunnels / mining environment

Re: Announcing the winners of our 2021 Points Contest

Re: DHCP snooping and Dynamic ARP Inspection

Re: Meraki MX68 VLAN bug?

Re: 172.17.X.X subnet

Re: Windows 10 version 1903 Client VPN issue

Re: RADIUS server for VPN question?

Re: Client VPN question

Re: Meraki Cloud outage today?

Re: Voice VLAN for VoIP phones

Re: Meraki showing 'Bad Gateway', no internet connectivity

Re: Default gateway, and meraki landing page

Re: Meraki WAN fail email alert

Re: MX68 rack mount

Re: HI there from Argentina!

Re: Introducing myself and Cohort Networks to the community

Re: Introduction

Re: Can't ping a subnet from VPN

Re: Meraki MX and UniFi AP

Re: Does Meraki MX need connection to the Meraki cloud / Internet?

Re: Can't ping a device on the network

Re: Photo Contest: Be featured in the Cisco Meraki Quarterly!

Re: Odd WAN behavior

Re: Welcome! Please introduce yourself.

Your hobbies

Re: MX device local status page