Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About RichardChen1
RichardChen1
Getting noticed
Member since Mar 10, 2019
Sunday
Community Record
68
Posts
10
Kudos
1
Solution
Badges
Mar 30 2023
4:09 PM
My company in Australia is also looking. It'd be great to see any feedback or lesson learnt from any MX users.
... View more
Dec 21 2020
5:06 PM
I thought so. Thanks for your feedback.
... View more
Dec 19 2020
12:53 PM
Current state: MR33 with psk. All corp computers are enrolled with Microsoft Intune with SCEP. New requirement: How can we make this so that staff can move around the offices freely and not have to remember or enter a password for a registered device? Questions: - Can Meraki talk to Intune directly? I can't find any info, mostly likely not? - Radius server is a must? - Is "Trusted acess" a solution that can scale not only on mobile but also windows computers? Any suggestion is appreciated. Thanks in advance.
... View more
Oct 13 2020
3:50 PM
Does your AD have a valid certificate?
... View more
Oct 12 2020
9:19 PM
@Ignat thanks for the update. Since the concentrator has a lan ip address. What kind of port forwarding required for client vpn to work? Just udp500/4500 to lan ip?
... View more
Sep 1 2020
5:33 PM
Hi @PhilipDAth , I can't seem to find any installation guide on the antenna. Looks like just screw on the MG21's antenna port right? Do you know if the antenna is ourdoor proof? I can replace the coex cable with any standard/longer one right?
... View more
Sep 1 2020
3:58 PM
Hi @PhilipDAth , Thanks for the feedback. I take this as a good use case for Patch Antenna?
... View more
Aug 31 2020
12:42 AM
Existing Cellular HW: Cisco 800 router + 3rd party external/roof top aerial antenna because the cellular signal indoor is poor. Our solution arch has proposed MG21E + MA-ANT-C1-B Patch Antenna with the same 4G cellular provider. Question: Would the new Meraki solution improve the 4G signal and speed? What is the installation requirement of Patch antenna? It must install at out door and point to certain 4G tower? I check the datasheet https://documentation.meraki.com/MG/MG_Cellular_Patch_Antenna_Datasheet, but don't really understand those cellular terms. I'm new to this MG product. Can anyone answer the above questions and also explain in simple term: apart of upgrading co-ex cable to cat5 to improve signal lost on cabling, can we consider MG+Antenna as a solution to improve 4G speed/signal strength? Thanks in advance.
... View more
Aug 2 2020
10:36 PM
Which migration step did you take eventually? I have migrated DMVPN to Meraki before with HUB vpn concentrator + static route between the Hub DMVPN router.
... View more
May 20 2020
12:07 AM
1 Kudo
Our Mac guru has found a workaround by adding a script that runs everytime the VPN is connected. https://akrabat.com/routing-specific-traffic-to-the-vpn-on-os-x/
... View more
May 18 2020
11:39 PM
Thank you for the link. Windows users are fine. Issue is with MacOS.
... View more
May 18 2020
7:21 PM
We have a vmx100 in Azure - which remote user vpn into. We followed this guide and add static route on MacOS for the split tunnel to work. route add -net <destination subnet> -netmask <subnet mask> -interface ppp0 https://documentation.meraki.com/MX/Client_VPN/Configuring_Split_Tunnel_Client_VPN#Configuring_Split_Tunnel_for_OS_X It works fine on most of the Mac and Windows users. However, the static route disappeared after os reboot. We used the os admin user to add the route. Any idea how to fix that? Not working OS version: Sierra 10.12.6 Working version: High Sierra V10.13.6
... View more
May 5 2020
6:02 PM
Hi @nikma @PhilipDAth , I have a similar request here. Our client prefers Azure MFA over DUO. I managed to find the guide to setup Azure MFA https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-deploy Could you please let me know where to find the hands-on guide +NPS setup?
... View more
Apr 29 2020
4:45 PM
Any solution for this? My requirement is to setup client to site vpn on vMX Azure with a fixed public ip. Our Azure team told me that fixed public ip can't be applied to vMX instance duo to Azure limitation.
... View more
Mar 11 2020
4:00 PM
Thanks guys. Meraki Support has enabled this feature for me. I will start testing soon.
... View more
Mar 9 2020
11:04 PM
Looks like an issue on the LAN segment of MX? Try a different router?
... View more
Mar 9 2020
6:20 PM
Try both wan1 and wan2 ports. Also try not to use the dedicate circuit, instead a simple home internet with soho router maybe? You can login to local webportal to check the live status.
... View more
Mar 9 2020
6:13 PM
1 Kudo
Can you confirm your EE connection plan? You mentioned only 100M down, but 1000M up. I ran into a similar issue before, but was mainly due to duplex mismatch between MX and ISP. However, even when the duplex issue was fixed, the MX still could not get the max speed due to the shaping. IE: we got MX84 with a EE 800M service, but shaping on dashboard only support up to 500M. Not sure if it is possible to disable uplink shaping in dashboard.
... View more
Mar 9 2020
6:02 PM
FW: MX 15.27 I am testing the "Direct Internet Access with MPLS failover" use case described under this Meraki doco. https://documentation.meraki.com/MX/Networks_and_Routing/NAT_Exceptions-No_NAT_on_MX_Security_Appliances Questions from my test: Both WAN 1 and 2 must have internet access for this to work? In other words: WAN1 and 2 must be online first? What if my MPLS link does not have internet access? If I enabled NONAT on WAN2, I can't see "Inbound Rules" enabled under Firewall options. But as per the guide I should do a deny any any. What's the expect option? To send traffic to WAN2, I need to apply PBR under Uplink selection -> Flow preferences right? Not to use static route? My idea is to force certain MPLS subnets/routes to go via WAN2/MPLS. Other question: I can't terminate MPLS/EBGP on MX because EBGP is on BETA and only supported on concentrator mode right?
... View more
Feb 26 2020
9:14 PM
I tested the same setup on a few Android and iPhone. I was able to replicate the same issue on all iPhones but not Androids. @PhilipDAth @MerakiDave I believe you are correct on this. Thank you.
... View more
Feb 25 2020
4:27 PM
MR33 with ISE (CWA) https://documentation.meraki.com/MR/Encryption_and_Authentication/CWA_-_Central_Web_Authentication_with_Cisco_ISE#Cisco_ISE_Configuration The redirection works, and after entering guest username/pw. I was able to get full network access. However, the WIFI disconnected after a few minutes - it was my phone, so I lock it after testing. This is the log I got from Meraki dashboard - "disassociated because device was idle". Can't find any docomentation on this msg. This issue doesn't apply to other SSID with just PSK, no 802.1x. Question: How/where to modify this idle setting?
... View more
Feb 25 2020
4:13 PM
2 Kudos
Thanks @MerakiDave Issue resolved. My lab ISE was running on vmware that bridge to wireless connection. I was able to resolve it by changing from wireless to wired connection.
... View more
Feb 24 2020
9:14 PM
I was doing my lab for CWA - Central Web Authentication with Cisco ISE. https://documentation.meraki.com/MR/Encryption_and_Authentication/CWA_-_Central_Web_Authentication_with_Cisco_ISE After entering the correct username/pw on the ISE CWA portal, the COA was sent from ISE to MR33. However, I encountered the following MSG on ISE, it seems that COA failed because MR33 is not responding. I did enabled COA on Dashboard SSID Access control. Is there a way I can verify the COA/port 1700 is enabled on all MR33 AP? Telnet? My AP and ISE are on different subnet, no firewall in between them.
... View more
Feb 24 2020
2:27 PM
On your vpn concentrator make sure the public ip and ports are allowed on PA. Dashboard -> Help -> Firewall info On the spoke MX, go to dashboard -> Monitor -> VPN Status see if you have any error message.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 7575 | Feb 10 2020 7:51 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 2682 | |
| 1 | 2957 | |
| 1 | 5006 | |
| 1 | 1956 | |
| 1 | 7773 |
© 2024 Cisco Systems, Inc.
