Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Fakrul
Fakrul
Here to help
Member since Feb 24, 2019
Jul 23 2019
Community Record
12
Posts
1
Kudos
0
Solutions
Badges
Jul 1 2019
9:24 PM
From API data it shows MX is connected with all 3 MS swtiches and correnspondence port: But topology diagram showing completely different thing.
... View more
Jun 15 2019
2:32 PM
Yes, ther are few non-meraki L2 devices; but they are connected from MX. Nothing between MS and MR.
... View more
Jun 14 2019
7:53 PM
Hi, Trying to figure out how to configure site to site VPN redundency when there one single uplink for MX. By default AWS provision two (2) VPN tunnels. But when I try to configure both tunnels for the same remote subnet it is generating following error: Thoug the tunnels goes up and working fine; but wondering whether there will be any issue? Thanks Fakrul
... View more
Jun 14 2019
7:41 PM
Hi, The topology build by Meraki look doesn't match how swtiches and access points are physicall connected. But physically all the switches/stacs are connected to MX firewall and AP's are connected to Switches. But not sure why in the topolog CORESW03 is showing it is connected to WAP-12. Same for CORESW02-Stack. Beside this what is the best recommendation for STP Guard setttings for the port connected to the AP? Thanks Fakrul.
... View more
May 24 2019
5:06 AM
Well it is very random. Drops are very frequent; more than 8-10 times a day. Loose connection between sites. Don't have to do anything. Tunnel comes up again automatically.
... View more
May 24 2019
4:23 AM
Any one using IKEv2 in production? I have 3 Meraki sites connected to Azure VPN gateway and IPSEC tunnel is not stable. The link is stable the but IPSEC tunnel flapped randomly and all 3 sites have same issue. Getting following event logs: May 17 16:13:09 Non-Meraki / Client VPN negotiation msg: <remote-peer-2|2796> CHILD_SA net-2{4534} established with SPIs cbc00e6e(inbound) 56318360(outbound) and TS 192.168.90.0/24 === 10.0.0.0/16 May 17 16:13:03 Non-Meraki / Client VPN negotiation msg: <remote-peer-2|2796> IKE_SA remote-peer-2[2796] established between 203.54.xxx.xxx[203.54.xxx.xxx]...52.187.xxx.xxx[52.187.xxx.xxx] May 17 16:08:41 time: 1558073318, pkts_recv: 141831, daq_analyzed: 141831 more » May 17 16:05:24 Non-Meraki / Client VPN negotiation msg: <remote-peer-2|2793> CHILD_SA net-2{4532} established with SPIs ce309784(inbound) aa7423e2(outbound) and TS 192.168.90.0/24 === 10.0.0.0/16 May 17 16:05:14 Non-Meraki / Client VPN negotiation msg: <remote-peer-2|2793> IKE_SA remote-peer-2[2793] established between 203.54.xxx.xxx[203.54.xxx.xxx]...52.187.xxx.xxx[52.187.xxx.xxx] May 17 16:05:14 Non-Meraki / Client VPN negotiation msg: <remote-peer-2|2792> deleting IKE_SA remote-peer-2[2792] between 203.54.xxx.xxx[203.54.xxx.xxx]...52.187.xxx.xxx[52.187.xxx.xxx] There is another tunnel between DrayTek Vigore and same Azure VPN gateway which is working fine. Anybody having issue like this? I have tried checking the issue with Microsoft support team. They informed me that Meraki is not compatible with Azure VPN gateway, which is very unfortunate 😞 https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices#known Thanks
... View more
May 19 2019
3:55 PM
Running MX 15.13 and support activate IKEv2 from backend. But issue is the tunnel is not stable.
... View more
May 16 2019
11:35 PM
With IKEv2 (route-based) Azure VPN Gateway implementation the IIPSEC connection is flapping and being disconnected. Getting following event logs: May 17 16:13:09 Non-Meraki / Client VPN negotiation msg: <remote-peer-2|2796> CHILD_SA net-2{4534} established with SPIs cbc00e6e(inbound) 56318360(outbound) and TS 192.168.90.0/24 === 10.0.0.0/16 May 17 16:13:03 Non-Meraki / Client VPN negotiation msg: <remote-peer-2|2796> IKE_SA remote-peer-2[2796] established between 203.54.xxx.xxx[203.54.xxx.xxx]...52.187.xxx.xxx[52.187.xxx.xxx] May 17 16:08:41 time: 1558073318, pkts_recv: 141831, daq_analyzed: 141831 more » May 17 16:05:24 Non-Meraki / Client VPN negotiation msg: <remote-peer-2|2793> CHILD_SA net-2{4532} established with SPIs ce309784(inbound) aa7423e2(outbound) and TS 192.168.90.0/24 === 10.0.0.0/16 May 17 16:05:14 Non-Meraki / Client VPN negotiation msg: <remote-peer-2|2793> IKE_SA remote-peer-2[2793] established between 203.54.xxx.xxx[203.54.xxx.xxx]...52.187.xxx.xxx[52.187.xxx.xxx] May 17 16:05:14 Non-Meraki / Client VPN negotiation msg: <remote-peer-2|2792> deleting IKE_SA remote-peer-2[2792] between 203.54.xxx.xxx[203.54.xxx.xxx]...52.187.xxx.xxx[52.187.xxx.xxx] There is another tunnel between DrayTek Vigore and same Azure VPN gateway which is working fine. Anybody having issue like this? Thanks
... View more
May 16 2019
6:56 PM
Hi, I need to connect MS250 switch via fiber to a Ubiquiti edge switch. Ubiquiti using UF-MM-1G (850 nm MM) transceiver. If I use MA-SFP-1GB-SX for MS250 will there by any compatibility issue? As per the Meraki datasheet I can see different specification: Thanks
... View more
Hi Philip, Thanks. Got the issue. We have used self signed certificate and it's giving error. Just set it as trusted certificate. Regards. Fakrul.
... View more
Feb 24 2019
8:55 PM
Hi, I have configured Meraki AP with Radius (Active Directory) authentication and all looks ok. Users can see and join the SSID by typing their AD username and password. But when they try with "use my Windows user account" option they can't connect. They option populate the details but can't connect. I have enabled syslog and following is the successful authentication: Feb 25 14:15:44 10.244.214.22 1551064544.109238217 Sydney_Wireless events type=association radio='1' vap='0' client_mac='D4:6D:6D:61:65:2A' client_ip='10.244.214.159' channel='140' rssi='29' identity='DOMAIN\F.Falam' aid='89159985'
Feb 25 14:17:49 10.244.214.22 1551064669.604770865 Sydney_Wireless events type=8021x_eap_failure radio='1' vap='0' client_mac='D4:6D:6D:61:65:2A' client_ip='10.244.214.159' identity='DOMAIN\F.Falam' aid='3147780'
Feb 25 14:17:49 10.244.214.22 1551064669.605551871 Sydney_Wireless events type=8021x_deauth radio='1' vap='0' client_mac='D4:6D:6D:61:65:2A' client_ip='10.244.214.159' identity='DOMAIN\F.Falam' aid='3147780'
Feb 25 14:17:49 10.244.214.22 1551064669.608800857 Sydney_Wireless events type=disassociation radio='1' vap='0' client_mac='D4:6D:6D:61:65:2A' channel='140' reason='1' instigator='2' duration='1.979381442' auth_neg_failed='1' is_8021x='1' identity='DOMAIN\F.Falam' aid='3147780' But when I try with Windows login option, unsuccessful authentication: Feb 25 14:15:30 10.244.214.22 1551064530.601959240 Sydney_Wireless events type=8021x_eap_failure radio='1' vap='0' client_mac='D4:6D:6D:61:65:2A' client_ip='10.244.214.159' identity='DOMAIN\F.Falam' aid='2147337438'
Feb 25 14:15:30 10.244.214.22 1551064530.602552804 Sydney_Wireless events type=8021x_deauth radio='1' vap='0' client_mac='D4:6D:6D:61:65:2A' client_ip='10.244.214.159' identity='DOMAIN\F.Falam' aid='2147337438'
Feb 25 14:15:30 10.244.214.22 1551064530.614267893 Sydney_Wireless events type=disassociation radio='1' vap='0' client_mac='D4:6D:6D:61:65:2A' channel='140' duration='1.969384566' auth_neg_failed='1' is_8021x='1' identity='DOMAIN\F.Falam' aid='2147337438'
... View more
© 2024 Cisco Systems, Inc.
