Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Denson
Community Record
8
Posts
0
Kudos
0
Solutions
Badges
Dec 30 2019
1:18 PM
Both thanks for replying. Seems policy based VPN is best suited for this scenario. Will have other side check the encryption domain.
... View more
Dec 30 2019
6:28 AM
Hi there, I'm trying to setup a s2s-tunnel between Meraki and Azure. Since i'm not managing the Azure side i'm not able to troubleshoot a whole lot so i'm just checking here to see i'f im missing something. Goal: Establish HA connection between Meraki MX and Azure in order to access Azure VM from local network. Config: Hub NAT Auto Default Azure IPSec policies Problem: 1. Configured tunnel is not coming up and fails on phase 1. Checked event log and notice phase 1 keeps failing. When searching online i noticed someone mentioning using vMX100 instead of native azure vpn is a must if u want to establish a stable connection. Is this true? Packet capture: 13:59:43.013415 IP SOURCE_IP.500 > DEST_IP.500: isakmp: phase 1 ? ident 13:59:46.366007 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident 13:59:46.366227 IP SOURCE_IP.500 > DEST_IP.500: isakmp: phase 1 R ident 13:59:46.371700 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident 13:59:46.372272 IP SOURCE_IP.500 > DEST_IP.500: isakmp: phase 1 R ident 13:59:46.375945 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident[E] 13:59:47.381407 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident[E] 13:59:48.388862 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident[E] 13:59:49.391046 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident[E] 13:59:53.017372 IP SOURCE_IP.500 > DEST_IP.500: isakmp: phase 1 ? ident 13:59:56.373432 IP SOURCE_IP.500 > DEST_IP.500: isakmp: phase 1 R ident 14:00:03.021388 IP SOURCE_IP.500 > DEST_IP.500: isakmp: phase 1 ? ident 14:00:06.377440 IP SOURCE_IP.500 > DEST_IP.500: isakmp: phase 1 R ident 14:00:11.529242 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident 14:00:11.529528 IP SOURCE_IP.500 > DEST_IP.500: isakmp: phase 1 R ident 14:00:11.534939 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident 14:00:11.535540 IP SOURCE_IP.500 > DEST_IP.500: isakmp: phase 1 R ident 14:00:11.539810 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident[E] 14:00:12.532372 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident[E] 14:00:13.534831 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident[E] 14:00:14.540428 IP DEST_IP.500 > SOURCE_IP.500: isakmp: phase 1 I ident[E] 14:00:16.381366 IP SOURCE_IP.500 > DEST_IP.500: isakmp: phase 1 R ident 14:00:21.537378 IP SOURCE_IP.500 > DEST_IP.500: isakmp: phase 1 R ident 2. Currently MX01 and MX02 are configured HA. how do i configure the S2S tunnel to remain active when a failover to ISP2 occurs. Network diagram:
... View more
Aug 26 2019
6:24 AM
While browsing through the Meraki dashboard i've noticed some vulnerabilities that apply to several of the networks managed by us (MSP). When checking the affected components it appears they already run on a firmware that is no longer affected by the vulnerabilities. For this reason i've decided to open a case to ask for additional information: 1) Which specific devices have been affected by the vulnerability. 2) For how long have these devices been affected (start/end date) To my suprise the response was that this information is not accessible for Meraki employees. This means we now need to inform our customers that they might have been victim to a data breach (GDPR), and have no way providing crucial information that helps determining the impact. I'm wondering how others are handling these 'events' when critical information is not accessible. I've also noticed there's no way on accessing vulnerability updates by API or subscribing to a mail alert. There must be a more efficiënt way to be notified about vulnerabilities then opening the dashboard. Any tips here would also be welcome.
... View more
Aug 26 2019
1:47 AM
Event log can not be accessed from API as far as i'm aware.
... View more
Aug 26 2019
1:42 AM
Sorry i forgot to mention, but i've tried this aswell. The primairy uplink is not 'down', so even though uplink decisions are passed through WAN2 the API returns WAN1 as active.
... View more
Aug 22 2019
1:54 AM
I'm trying to generate an CSV of MX devices with NAT Type 'Unfriendly' using the API. When looking at the documentation there's nothing i can find that would supply me with this information. Another way for us to determine there's NAT problems is by looking at the Uplink decision. Has anyone been able to get this info, perhaps by using a workaround, using the API?
... View more
Mar 22 2019
7:29 AM
i want to filter out specific traffic between client and service, in this example iTunes. My guess would be adding the parameter key 'application' and value 'iTunes' would help me do so. Adding these parameters to an API call don't seem to have any effect. another way i would like to filter is leaving out columns. Lets say the API call returns the following columns: "ts":, "application": "destination": "protocol": "port": "recv": "sent": "numFlows": "activeSeconds": }, I would like to only return the columns ''application" and "protocol". Can this be achieved within a tool like postman?
... View more
Mar 22 2019
3:18 AM
Hi there, I'm new to scripting and have trouble filtering API results. To be more precise, i'm using the Postman 'Meraki Dashboard API' and try to filter the results shown after running 'Return the client's network traffic data over time.'. This query currently returns the following values: "ts":, "application": "destination": "protocol": "port": "recv": "sent": "numFlows": "activeSeconds": }, i've tried adding different keys and values under 'Query Params' to filter the results. These keys and params seem to be ignored however. What am i missing? Any resources for filtering postman api results for beginners would be much appreciated. Example:
... View more
Labels:
- Labels:
-
Dashboard API
© 2024 Cisco Systems, Inc.
