Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Aamir
Aamir
Here to help
Member since Mar 12, 2019
May 20 2020
Community Record
30
Posts
1
Kudos
0
Solutions
Badges
May 20 2020
6:11 AM
is there a way on MX on spoke to see BGP path similar to show ip bgp on a router?
... View more
May 20 2020
6:07 AM
HI, In bridge mode do I still get firewall functionality? My understanding is bridge mode is firewall operating in layer 2 mode which means no routing, with one-armed concentrator deployment its still a layer 3 device, so by Passthrough or VPN Concentrator how does the MX know it needs to work on bridge mode with no routing and or VPN concentrator mode?
... View more
May 18 2020
9:21 PM
thanks, then how would the spoke know which hub is primary, can I still use the hub priority without iBGP on overlay?
... View more
May 18 2020
6:06 PM
Hi, When we select the MX to be in Passthrough or VPN Concentrator mode how does the MX know which mode to operate on? What features do we gain or loan in Passthrough or VPN Concentrator mode?
... View more
May 18 2020
5:53 PM
so I understand the benefits of BGP but lets say customer has no DC interconnect, upstream switch does not support BGP and customer has same subnet across the two DC. Can we still use iBGP on overlay to choose the hub priority for the same subnet and MX will get the same subnet via OSPF from upstream switch? Or when we enable iBGP we must use eBGP also?
... View more
May 18 2020
5:38 PM
Hi, I am not able to see the active-active AutoVpn option is that something new? Thanks, Aamir
... View more
May 12 2020
7:58 PM
ok so using BGP on MX (iBGP over the tunnels and eBGP with upstream) is optional. So if our upstream device does not support eBGP we don't use iBGP also and can use OSPF or static routers? Is there any relationship of using BGP on MX for DC-DC failover scenario where each MX is advertising same subnet? Thanks, Aanmir
... View more
May 12 2020
4:39 PM
Hi Bruce, The reason why I was mentioning to use OSPF on the iBGP on the SD-WAN scenario was in a situation where customer upstream device (switch) does not support BGP, hence cannot do eBGP peering between MX one-armed mode with upstream device (switch). In that case if we use OSPF between MX one-armed mode with upstream device (switch) is there an automatic re-distribution between iBGP and OSPF within MX?
... View more
May 11 2020
9:46 PM
Hi, If i use MX67C with 4G backup and my primary Internet goes down, does MX create AutoVPN tunnel over 4G? Thanks, Aamir
... View more
May 11 2020
8:44 PM
Hi, I have few clarifications: 1) If we consider two sites each having 2 internet links, will MX create 4 AutoVPN tunnels or two? 2) If we want to disable AutoVPN on one Internet link, is that possible in MX? Thanks, Aamir
... View more
May 11 2020
5:46 PM
Hi all, Two more questions, does it still make sense to get adv. sec license for MX if its in one-armed concentrator mode in DC since DC would have its security devices? Also with once-armed concentrator mode, iBGP is enabled on the tunnels. If we use OSPF between MX in one-armed concentrator mode and the upstream device (switch) is there an automatic redistribution between iBGP and OSPF. I understand MX can advertised OSPF routes but cannot learn them. Thanks, Aamir
... View more
May 11 2020
5:14 PM
agreed to all the answer, I guess its better to do HA within the same site or put an individual MX in vpn concentrator mode in backup DC and have tunnels to both the DC. thanks a lot all. Thanks, Aamir
... View more
May 10 2020
10:02 PM
Hi, Is it possible to have MX in one-armed VPN concentrator mode HA across two different sites? I understand there should be a layer 2 link between the sites but according to the following link it seems they have to communicate to the dashboard via the same IP also: https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair Thanks, Aamir
... View more
May 3 2020
6:28 AM
Thanks a lot, I usually put MR42 for general deployment, is it safe to say the next upgrade model of MR42 is MR46?
... View more
May 2 2020
11:13 PM
Hi, I am trying to understand if this SD-WAN design is worktable. The HO/DC has a MX in one-armed concentrator mode (in green). The HO/DC has internet and MPLS links. The branch has MX in NAT mode and has Internet and MPLS link. Will the branch MX and MX in DC create two tunnels (AUTOVPN) via internet and MPLS?
... View more
May 2 2020
11:06 PM
Hi, I would like to know which AP is better in terms of performance and number of simultaneous users it supports MR42 or MR36? Thanks, Aamir
... View more
Feb 24 2020
8:46 PM
Hi, I am trying to understand when designing SD-WAN solution whether to choose one-armed mode or NAT mode MX for a customer environment. I understand one-armed mode is recommended for DC which support BGP and required for DC-DC fail over but if customer has only one HO and dont really need BGP on the overlay what other reasons would justify a one-armed mode? Thanks, Aamir
... View more
Feb 22 2020
4:45 AM
What if i want no communication between wireless to wired and wireless to wireless in the same vlan?
... View more
Feb 21 2020
5:53 PM
Hi, The Layer 2 LAN isolation feature in Wireless will stop wireless to wired lan communication in the same vlan? Thanks, Aamir
... View more
Feb 20 2020
7:24 PM
1 Kudo
ok this is how i made it work: 1) Allow MS and MR IP and Deny everything as layer 3 policy on firewall 2) Configure MR to be in bridge mode 3) Create a group policy and in that add a layer 3 firewall policy to allow any any 4) Apply the group on a specific device 5) Wait 5 min and it works.
... View more
Feb 20 2020
7:21 PM
Hi. I noticed that you cannot add subnet or host on MX Firewall layer 3 policies that is not a local or VPN subnet which is not how traditional firewalls work? Any workaround on that?
... View more
Feb 19 2020
5:05 PM
Hi, I made a layer 3 firewall policy and denied everything. Then i went to group policy and put a firewall policy as any any. I went to network wide-->clients and choose a client and applied the group policy to one specific client but client still had no internet access. I even re-joined the client to wireless still same. In the troubleshooting it mentions the access column by using + sign but i cant see the access column?
... View more
© 2024 Cisco Systems, Inc.
