Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Jeizzen
Jeizzen
Getting noticed
Member since Jan 3, 2019
Dec 4 2023
Community Record
70
Posts
16
Kudos
2
Solutions
Badges
For point # 4, it is correct for the safe configuration Just a little twist about the time an MR needs to be connected to cloud if you want to put MR in Site Survey Mode and use 5 or 6GHZ band during that survey, MR will need to be connected to the cloud for at least 2 hours, instead of 30 minutes for the safe configuration https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/Conducting_Site_Surveys_with_MR_Access_Points
... View more
Mar 10 2023
8:06 AM
I was able in the past to easily unassing a pdl active and burning license from, for example, an MX67C, and to assign it to another MX67C same Org or not, didn't matter. Nowadays it seem a lot more not doable, getting error message, license just keep assigned to the original device, not able to assign it to another device. I opened a case and Meraki says an active and burning license cannot be unassigned after the first 7 days (which i was able to do today on 2 different device that have older than 7 days active and burning license) So what is the real call today about 1- unassigning an active and burning license from a device , 2- assigning it to another device, same model
... View more
Jan 19 2023
8:49 AM
2 Kudos
Here's an answer from meraki: In case the link goes down, the failover would be immediate. But a soft failure occurs when the link is still up, but there is no connectivity over it. All flows going over the Non-Preferred link will continue to be bound to the Non-Preferred link until 300 seconds pass without seeing any relevant frame or if TCP ended the session related to the flow on the Non-Preferred link. In this scenario, there is a chance that you'll have an active flow that will remain active on the Non-Preferred link after hours since the recovery of the preferred link.
... View more
Jan 10 2023
11:28 AM
4 Kudos
To add on my own question, a few seasons later, if it can help anyone Firmware upgrade that are scheduled in a configuration template will follow the setting of the timezone that has been manually changed in the related binded networks It will not follow the timezone that is set in the configuration template
... View more
Dec 14 2022
8:00 AM
Yeah......a VoIP flow that has dead air because the expiry time has not ended and it is still on the failed WAN 1 (in Graceful Mode failover), waiting for something to happen for 300 seconds ??
... View more
Dec 9 2022
5:45 AM
Hi, I just opened a case to have that clarification And Meraki confirms that Bandwidth limit that is either applied by Group Policy on a vlan or applied by Traffic Shaping rule on a subnet is a per-flow/client limit, and not an entire vlan/subnet limit. The only way to apply a ' per-vlan ' limit is on an SSID
... View more
Oct 26 2022
11:43 AM
Thanks for your comments @PhilipDAth, I'm wondering how to make it work while remote site 2 will still be on mpls/watchguard for sometime HQ and remote site 1, ok, they will be on AutoVPN However, I see a need for routes in MX/Watchguard for remote site 1 to reach HQ's LAN and also reach remote site 2 over MPLS, and vice-versa. In Concentrator mode, no routes possible I think Also, would you put it inline between LAN and Watchguard (more of a Passthrough designation ?), or in one-armed And I'm not sure I get the configuration difference between passsthrough and vpn concentrator, since we chose the same option in Addressing and VLANs. I don't think there's a place to chose between Passthrough or VPN concentrator Is the difference actually based on the way we insert it / use it in the design
... View more
Oct 24 2022
11:13 AM
Hi everyone, Have to merge 1 main and 2 remote sites that are on MPLS and Watchguard to Meraki + ISP internet. But customer wants to keep the main Watchguard firewall at HQ and wants all Internet traffic from all sites go through it. Here is what I started : At first, only HQ (hub) and remote site 1 will be on Meraki, remote site 2 will still be on Watchguard and MPLS for sometime. So, fulltunneling Internet traffic from remote site 1, and then telling MX84 at HQ to send all that Internet traffic into customer's Watchguard MX84 : static route 0.0.0.0/0 on Lan cable pointing to Watchguard + other static routes to reach HQ's LAN and remote site 2 that is still on MPLS and Watchguard Would there be any issue with MX84 at HQ being connected to its Internet 1 and 2, AND also having that 0.0.0.0/0 route pointing to customer's Watchguard. I guess this way, even the MX84 Meraki cloud communications would go through the Watchguard ; so Internet 1 and 2 would only be used for AutoVPN ? Maybe I don't see it the right way Passthrough between Watchguard and LAN ? Maybe VPN concentrator one-arm like in a DC (not even touching LAN at HQ) ? thanks,
... View more
Apr 29 2022
12:40 PM
Apr 26 2022
10:17 AM
Was it disconnecting before 28.6.1 Have you looked in the event log Are you MX, MX, MR ; all Meraki gear IP / management vlan conflict maybe ? Do clients feel the disconnect
... View more
Apr 26 2022
6:48 AM
Would someone see any possible issue if for a 2 switches stack, each switch would be given a mangement ip adress in a different vlan from the other switch ?
... View more
Mar 30 2022
10:16 AM
Yes, my apologies, seems that yes client vpn now can reset their password: Note: A user can modify their own credentials and reset their password if they are not an administrator account by logging in through account.meraki.com/account/account_login. This page is only available for users created under SSID configured as splash or Client VPN. those blue information squares in Meraki doc always have important notice 🙂
... View more
Mar 30 2022
8:51 AM
1. True 2. True Users cannot reset their passwords themselves Read-only access as an Guest Ambassador mode has the right to reset users vpn passwords
... View more
Mar 15 2022
7:50 AM
Mar 15 2022
7:37 AM
1 Kudo
so MX static route to ORBI subnet should be Subnet: 192.168.1.0/24 Next Hop: 192.168.128.3 (not 192.168.1.1) VPN Enabled and yes you should set 192.168.128.3 as a static ip
... View more
Mar 15 2022
5:56 AM
what is the ip you have on the interface of the ORBI that is facing the MX interface
... View more
Mar 14 2022
9:54 AM
1 Kudo
Whether yo put your Orbi gear (never had to deal with that kind of device) in something like bridge mode, and MX gives DHCP to devices behind Orbi gear Or Create a transport subnet (ex 192.168.100.0/30) between MX interface and Orbi interface Put 192.168.100.1 on MX interface facing Orbi Put 192.168.100.2 on Orbi interface facing MX Create a static route in MX: to reach subnet 192.168.1.0 (Orbi), go to 192.168.100.2 Create a route in Orbi to reach (whatever you need that is managed by MX), go to 192.168.100.1 you cannot have 192.168.1.1 on MX and Orbi
... View more
Sep 15 2021
8:32 AM
2 Kudos
Here is a note from Meraki, and it worked, even if we have 1 MX and 1 Watchguard instead of the 2 MXs in their explanation When configuring NMVPN connections between 2 MXs in different organizations that are running MX15 code and above that are not using a UserFQDN and are NATed behind an upstream device, please ensure that the remote ID field of the NMVPN peer is filled out with the private IP address of the remote NATed MX. Our setup: 1rst site: an MX that is NATed behind another device, getting 192.168.x.x on its Internet port 2nd site : Watchguard with ISP Public IP At both sites, we had Remote ID parameters configured with both Public IP S2S non-meraki vpn nerver came up, until we configured the remote ID field in Watchguard with the 192.168.x.x of the Meraki. S2S VPN came up right away
... View more
Mar 3 2021
7:17 AM
I've overriden it here for local time zone in my wireless network for a specific site X But in the general template it is still this: So: Does it mean that on that specific site X, APs will upgrade Wednesday 1 am (taken from template), but @ Toronto UTC -5 time ? thanks,
... View more
Feb 23 2021
5:37 AM
Hi, But as I see, there is nothing concerning the MR upgrade in the other part of this network (I've split the networks to be able to bind configuration template only for the wireless) is there something I'm misunderstanding thanks,
... View more
Feb 22 2021
1:04 PM
Hi Have a customer who has multiple sites across different timezones. I have made a configuration template for quicker deployment for APs. But what is happening for the firmware upgrades of the APs? Is there only 1 option for timezone choice in the configuration template? Does it mean that the APs that are in GMT - 8 upgrading at 5 am, then APs in GMT -5 will upgrade at 8am Is there any other way to upgrade by timezone, other than creating a configuration template for each timezone thanks,
... View more
Jan 27 2021
5:16 AM
@PhilipDAth When you say 'settings stick' to the user, do you know how ? MAC adress, username/password, etc.... thanks
... View more
Jan 26 2021
10:21 AM
1 Kudo
Hey Jason Yeah might have been a little hard on the 'real' term 🙂 I just meant private IP --> to Public IP --> to private IP back-and-forth I wonder now what is meant an the end of this topic that true SourceNAT is not supported..... https://community.meraki.com/t5/Security-SD-WAN/NAT-hairpin-question/td-p/55741 thanks for your details,
... View more
Jan 25 2021
6:17 AM
Hi GiacomoS, One example or reason for that is that we could have a Guest subnet that we want to be able to access LAN webserver. But : we don't want to give them access to any LAN, and no internal DNS is available. So we want them to go out and reach Public IP of MX, and then MX would realize it is destined for itself, and make them immediately come back in, to reach LAN webserver. So yeah, a real NAT loopback ( or Source NAT, Hairpinnig, U-Turn NAT or NAT Reflection as I've seen all around) is not a confirmed official feature for now ? if we want to create a real Hairpin, which is : LAN host only knows real Public IP of MX Internet port to reach LAN webserver. Is MX able to handle this kind of request from host and create functional back-and-forth traffic ? thanks,
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 5829 | Mar 30 2022 10:16 AM | |
| 7643 | Mar 15 2022 7:37 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 4 | 3532 | |
| 2 | 8445 | |
| 2 | 6900 | |
| 1 | 7643 | |
| 1 | 7693 |
© 2025 Cisco Systems, Inc.
