Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Become a member of the Cisco Meraki Community today
Get answers from our community of experts in record time.
Join nowAbout Aamir
Aamir
Here to help
Member since Mar 12, 2019
Jul 16 2024
Community Record
49
Posts
1
Kudos
0
Solutions
Badges
Jul 16 2024
4:27 PM
Hi, I have two MX in HA and one MG41, can i connect the single MG41 with both MX (WAN port) and if primary MX fails the secondary MX will take over and go on the internet via MG41? will that work automatically, any special configuration needed to make that happen?
... View more
Jul 9 2024
6:21 PM
Can we now make sd-wan tunnels over the 4G builtin SIM the "c" MX devices like MX67c?
... View more
Jun 5 2024
3:59 PM
correct but i need to know what happens to the tunnels (autovpn) or manual on MPLS links then HQ internet goes down, do they stay up or go down?
... View more
Jun 5 2024
3:48 PM
that's true but i do need MPLS to also have IPSEC tunnel. but lets say i do this (MPLS circuit into LAN port in branch), but i have one armed concentrator in HQ, how will the one armed concentrator know to make IPSEC tunnels (autovpn) over internet and not over MPLS?
... View more
Jun 4 2024
11:49 PM
Are you sure? How long did the AutoVPN on MPLS stayed up? I recon it will come down as the source address on the registry will be blank? Configuring Site-to-site VPN over MPLS - Cisco Meraki Documentation
... View more
Jun 4 2024
6:38 PM
Configuring Site-to-site VPN over MPLS - Cisco Meraki Documentation
... View more
Jun 4 2024
5:32 PM
Hi, In this case (Link provided) there is no Auto-VPN on MPLS but in my case i need Auto-VPN on MPLS also, in that case if the internet link at HQ/DC goes down the IPSEC tunnel on my MPLS will go down and MPLS WAN port on MX will get disabled?
... View more
Jun 4 2024
4:45 PM
Hi, Is this correct that each WAN ports in MX needs access to Internet (to reach the Meraki dashboard)? If a customer has one internet link and MPLS link at branch site connected to MX, is it a must that the MX at the branch location must have access to the Internet via the MPLS link to send its management traffic to the Cloud. This Internet connection will most likely be provided via HQ/DC? If the internet at HQ/DC goes down what happens to the WAN port which has MPLS connected at the branch site, does it stop forwarding traffic? what happens in case of non-sdwan and sd-wan scenarios?
... View more
May 27 2024
5:49 PM
thanks do we know how much time it would take it to make IPSEC tunnel via the backup internet link once primary link goes down?
... View more
May 26 2024
9:07 PM
Hi, I have a customer in process of deploying MX and Zscaler. The MX will have dual internet links with one IPSEC tunnel to Zscaler Node (ZEN's). My understanding is the IPSEC tunnel will be formed via the primary link connected to MX. What happens if the primary link goes down, will MX automatically create IPSEC tunnel to Zscaler Node (ZEN's) via the secondary internet link?
... View more
May 22 2024
4:32 PM
Hi, I have a 50 site network where MX is getting deployed with AutoVPN. I need to enable OSPF on LAN side, is there an efficient way to enable OSPF on 50 MX or i have to do it one by one?
... View more
Labels:
- Labels:
-
Other
Apr 28 2024
5:54 PM
Hi, For L2TP I had a chat with Meraki SE and he mentioned the group policy will be tied to the VPN client virtual MAC address and not the username and virtual MAC address can change and if it changes then group policy wont get applied?
... View more
Apr 25 2024
5:31 PM
Hi, For client VPN, my customer would like his suppliers to connect to his network, get locally authenticated and get access to a specific VLAN based only? How to do that in Meraki.
... View more
Labels:
- Labels:
-
Client VPN
Apr 21 2024
6:14 PM
Hi, Just to re-confirm if i have local AD then i make sure each MX authenticate with AD. all the VLAN default gateway is MX. So for eg. i have a user John, from HR, he logs on to his windows machine using AD credentials, and MX will be able to block youtube.come for John, similarly Andrew from HR gets facebook.com blocked even though both users are coming from HR Vlan but belong to different AD groups in AD?
... View more
Apr 16 2024
7:06 PM
So what's the purpose of Azure AD integration with MX via SAML? is that just for Anyconnect? Does it mean for AnyConnect users that get authenticated via Azure AD i can do webfitering (based on group policy) but not for internal clients?
... View more
Apr 16 2024
5:37 PM
hi, How to achieve the same if customer has Azure AD?
... View more
May 20 2020
6:11 AM
is there a way on MX on spoke to see BGP path similar to show ip bgp on a router?
... View more
May 18 2020
9:21 PM
thanks, then how would the spoke know which hub is primary, can I still use the hub priority without iBGP on overlay?
... View more
May 18 2020
5:53 PM
so I understand the benefits of BGP but lets say customer has no DC interconnect, upstream switch does not support BGP and customer has same subnet across the two DC. Can we still use iBGP on overlay to choose the hub priority for the same subnet and MX will get the same subnet via OSPF from upstream switch? Or when we enable iBGP we must use eBGP also?
... View more
May 18 2020
5:38 PM
Hi, I am not able to see the active-active AutoVpn option is that something new? Thanks, Aamir
... View more
© 2025 Cisco Systems, Inc.
