Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Jeizzen
Jeizzen
Getting noticed
Member since Jan 3, 2019
Dec 4 2023
Community Record
70
Posts
16
Kudos
2
Solutions
Badges
For point # 4, it is correct for the safe configuration Just a little twist about the time an MR needs to be connected to cloud if you want to put MR in Site Survey Mode and use 5 or 6GHZ band during that survey, MR will need to be connected to the cloud for at least 2 hours, instead of 30 minutes for the safe configuration https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/Conducting_Site_Surveys_with_MR_Access_Points
... View more
Mar 10 2023
8:06 AM
I was able in the past to easily unassing a pdl active and burning license from, for example, an MX67C, and to assign it to another MX67C same Org or not, didn't matter. Nowadays it seem a lot more not doable, getting error message, license just keep assigned to the original device, not able to assign it to another device. I opened a case and Meraki says an active and burning license cannot be unassigned after the first 7 days (which i was able to do today on 2 different device that have older than 7 days active and burning license) So what is the real call today about 1- unassigning an active and burning license from a device , 2- assigning it to another device, same model
... View more
Feb 7 2023
5:48 AM
Hi, Same scenario here Is public ip ok to be put on an MS for its management ip ? I'd get the ISP to allow only Meraki cloud communication inbound to the MS management ip thanks,
... View more
Jan 19 2023
8:49 AM
2 Kudos
Here's an answer from meraki: In case the link goes down, the failover would be immediate. But a soft failure occurs when the link is still up, but there is no connectivity over it. All flows going over the Non-Preferred link will continue to be bound to the Non-Preferred link until 300 seconds pass without seeing any relevant frame or if TCP ended the session related to the flow on the Non-Preferred link. In this scenario, there is a chance that you'll have an active flow that will remain active on the Non-Preferred link after hours since the recovery of the preferred link.
... View more
Jan 10 2023
11:28 AM
4 Kudos
To add on my own question, a few seasons later, if it can help anyone Firmware upgrade that are scheduled in a configuration template will follow the setting of the timezone that has been manually changed in the related binded networks It will not follow the timezone that is set in the configuration template
... View more
Dec 14 2022
8:00 AM
Yeah......a VoIP flow that has dead air because the expiry time has not ended and it is still on the failed WAN 1 (in Graceful Mode failover), waiting for something to happen for 300 seconds ??
... View more
Dec 9 2022
5:45 AM
Hi, I just opened a case to have that clarification And Meraki confirms that Bandwidth limit that is either applied by Group Policy on a vlan or applied by Traffic Shaping rule on a subnet is a per-flow/client limit, and not an entire vlan/subnet limit. The only way to apply a ' per-vlan ' limit is on an SSID
... View more
Nov 28 2022
11:32 AM
Good point ; Would Anyconnect be better for applying authorized logon hours to the vpn clients,
... View more
Nov 28 2022
6:40 AM
Hi, I know this has been discussed a lot, policies vs client vpn (Windows L2TP Client VPN) One of our customer is asking if it is possible to apply hour restrictions (schedule) for their client VPN on Windows L2TP. The client vpn are connecting via their AD I don't know AD a lot, but would these options worth a try ? 1- Configure in their AD a schedule for the user that is used for Client VPN AD login OR 2 - Enable Active Directory authentication, and then apply a Meraki group policy to an LDAP group related to the Client VPN (as I said not an expert with AD) thanks,
... View more
Nov 16 2022
10:39 AM
Yes, as in the screenshot Because our customer asked us few weeks ago to enable load balancing, then comes back to us today with these new needs. 10.2.1.2/32 must go out on WAN 2 All other traffic must go out on WAN 1 So I think the real need in the end will be to disable load balance, and add only 1 rule : 10.2.1.2/23 out WAN 2 OR would Load Balance Enabled + the 2 rules applied manage the traffic the same way ??
... View more
Nov 16 2022
8:11 AM
Well, seems I read the doc too fast yeah this sentence says a lot : Flow preferences will also supersede load balancing decisions. For point # 3, still haven't found anything regarding how are applied the rules If they are not applied this way : up to bottom, first hit is applied, then rule #2 would supersede rule #1
... View more
Nov 16 2022
7:32 AM
Hi, Wondering how is going to react traffic with this configuration, with load balancing enabled: 1- Will 10.2.1.2/32 sourced traffic always go out WAN 2 2- Will all other traffic be load balanced, or will it follow the 2nd rule of Flow preferences and always go out on WAN 1. 3- Are Flow preferences working the same way as layer 3 firewall rules (up to bottom, first hit is applied) What has precedence over what Do Flow preferences override the Enabled Load Balancing thanks,
... View more
Oct 26 2022
11:43 AM
Thanks for your comments @PhilipDAth, I'm wondering how to make it work while remote site 2 will still be on mpls/watchguard for sometime HQ and remote site 1, ok, they will be on AutoVPN However, I see a need for routes in MX/Watchguard for remote site 1 to reach HQ's LAN and also reach remote site 2 over MPLS, and vice-versa. In Concentrator mode, no routes possible I think Also, would you put it inline between LAN and Watchguard (more of a Passthrough designation ?), or in one-armed And I'm not sure I get the configuration difference between passsthrough and vpn concentrator, since we chose the same option in Addressing and VLANs. I don't think there's a place to chose between Passthrough or VPN concentrator Is the difference actually based on the way we insert it / use it in the design
... View more
Oct 24 2022
11:13 AM
Hi everyone, Have to merge 1 main and 2 remote sites that are on MPLS and Watchguard to Meraki + ISP internet. But customer wants to keep the main Watchguard firewall at HQ and wants all Internet traffic from all sites go through it. Here is what I started : At first, only HQ (hub) and remote site 1 will be on Meraki, remote site 2 will still be on Watchguard and MPLS for sometime. So, fulltunneling Internet traffic from remote site 1, and then telling MX84 at HQ to send all that Internet traffic into customer's Watchguard MX84 : static route 0.0.0.0/0 on Lan cable pointing to Watchguard + other static routes to reach HQ's LAN and remote site 2 that is still on MPLS and Watchguard Would there be any issue with MX84 at HQ being connected to its Internet 1 and 2, AND also having that 0.0.0.0/0 route pointing to customer's Watchguard. I guess this way, even the MX84 Meraki cloud communications would go through the Watchguard ; so Internet 1 and 2 would only be used for AutoVPN ? Maybe I don't see it the right way Passthrough between Watchguard and LAN ? Maybe VPN concentrator one-arm like in a DC (not even touching LAN at HQ) ? thanks,
... View more
Aug 4 2022
6:13 AM
For this to work, did you need to create a new vlan that includes port Internet 2 and port 11 ? Because I think what one of my colleague did once was (with an MS in the setup) : 1 switchport to MG21 poe port 1 switchport to Internet 2 (so Internet 2 not connected directly to MG21) Those 2 switchports in same vlan
... View more
Apr 29 2022
12:40 PM
Apr 26 2022
10:17 AM
Was it disconnecting before 28.6.1 Have you looked in the event log Are you MX, MX, MR ; all Meraki gear IP / management vlan conflict maybe ? Do clients feel the disconnect
... View more
Apr 26 2022
6:48 AM
Would someone see any possible issue if for a 2 switches stack, each switch would be given a mangement ip adress in a different vlan from the other switch ?
... View more
Apr 21 2022
10:38 AM
Do you run RSTP on the switchports BPDU guard on access ports How many switches are directly connected to the MX (best practice should be only 1) MX doesn't do Spanning tree
... View more
Apr 8 2022
9:01 AM
Maybe related to Meraki info in 'Release Notes' of recent MX, MR firmwares Important note Meraki APs use UDP port 7351 for cloud communication and TCP ports 80 and 443 for backup communications when running MR 27 and older firmware. When running MR 28 firmware, Meraki APs will now use TCP port 443 as the primary means for cloud connectivity. In order to maintain connectivity to the Meraki cloud on MR 28+ ensure that TCP port 443 is allowed to communicate with 209.206.48.0/20 on firewalls that are deployed upstream of your Meraki APs. (Wi-Fi 6 MRs) Or if you're in Europe (eventhough it has been resolved): https://community.meraki.com/t5/Meraki-Service-Notices/Dashboard-connectivity-in-Europe-region/ba-p/143816
... View more
Apr 5 2022
11:01 AM
Could @Meraki confirm the tests I made are accurate about Priority and Bandwidth and that it is how it is supposed to react ? thanks
... View more
Mar 30 2022
10:16 AM
Yes, my apologies, seems that yes client vpn now can reset their password: Note: A user can modify their own credentials and reset their password if they are not an administrator account by logging in through account.meraki.com/account/account_login. This page is only available for users created under SSID configured as splash or Client VPN. those blue information squares in Meraki doc always have important notice 🙂
... View more
Mar 30 2022
8:51 AM
1. True 2. True Users cannot reset their passwords themselves Read-only access as an Guest Ambassador mode has the right to reset users vpn passwords
... View more
Mar 18 2022
11:43 AM
I've encountered this Our customer was blocked to accessing their server Traffic Analysis running on : 'basic:collect generic traffic categories' Looking at Event logs, there was a 'Statistical P2P' NBAR rule blocking their server access But, if you look in 'All P2P' layer7 Deny rules, 'Statistical P2P' doesn't exists had to open a case, and Meraki answered that it was in fact related to the 'Encrypted P2P' rule So I had to put a Deny on all of the P2P rules, except for Encrypted P2P Because yeah, there is no 'Allow' option for layer 7 rules, which really has to be worked on by Meraki
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 4410 | Mar 30 2022 10:16 AM | |
| 6671 | Mar 15 2022 7:37 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 4 | 2272 | |
| 2 | 7206 | |
| 2 | 4860 | |
| 2 | 6089 | |
| 1 | 4069 |
© 2024 Cisco Systems, Inc.
