Meraki

KarstenI · ‎Sep 6 2022

None of the Meraki Models. There is a Mesh mode, but that is not meant to connect two building. There are other non-Meraki devices that support a real bridge-mode.

KarstenI · ‎Sep 6 2022

Well, the newer models, like the MX85, has PoE on one of the WAN-ports. But the older devices all don't have this.

KarstenI · ‎Sep 5 2022

As a rule of thumb, the external traffic should not run through an internal switch. I would go for an external power injector. Either a regular one or something like a ZyXel 5-port PoE switch as I have to connect my MG41 to the MX68.

KarstenI · ‎Sep 5 2022

Where did you do the ECMS? If through a learning-partner, then tell them you need the "Certificate of Completion". If you did it through the Cisco OnDemand E-Learning (as I did) the Certificate was downloadable at the end of the training.

KarstenI · ‎Sep 3 2022

You find the relevant settings under "SD-WAN & traffic shaping". Assuming the MG21 is connected to WAN2, you have to: Set the primary Uplink to WAN1 Disable Load balancing Disable Active-Active AutoVPN Have no Flow- and uplink preferences configured. Now your fibre line is primary and the cellular gateway will be used as a backup.

KarstenI · ‎Sep 3 2022

Congratulation to all and especially to @RaphaelL Perfect timing after your new All-Star designation!

KarstenI · ‎Sep 1 2022

Netflow: https://www.pcwdld.com/free-open-source-netflow-analyzers For SNMP I can recommend CheckMK, there is on open version but also a commercial product that is free for up to 25 devices. https://checkmk.com/product/editions

KarstenI · ‎Sep 1 2022

Two available options are querying the MX with SNMP or send NetFlow data to your collector.

KarstenI · ‎Aug 31 2022

By default there is no isolation. But you can control the traffic with the Firewall-Rules on the MX. And your Windows firewall would be the second line of defence. For AnyConnect the licensing is not 100% clear for external users. But the general rule is that the company owning the VPN-gateway needs to make sure these licenses are valid. And this is regardless if they are enforced or not.

KarstenI · ‎Aug 31 2022

In this scenario you would use the routed mode which gives you both NAT and also AnyConnect access on the public interface. Be aware that AnyConnect needs a separate license-subscription. But I would go for the MX67, This device is only slightly more expensive and will have longer support than the MX64 which is already End-of-Sale.

KarstenI · ‎Aug 30 2022

In general, they shouldn't be mixed. But in your case, they are both WiFi6 with quite similar characteristics. Here I would say it is generally ok if you don't use 6GHz. But with 6GHz I have no idea how they behave.

KarstenI · ‎Aug 29 2022

In this scenario you just point your request to the IP on the secondary WAN. Or you let your DNS-server handle a rewrite of the A-record if the first circuit goes down.

KarstenI · ‎Aug 29 2022

Did you get your Certificate of Completion for the training? With the info on this you can add it to the CE-Dashboard.

KarstenI · ‎Aug 28 2022

Oh, this category is only available with MX version 17+

KarstenI · ‎Aug 26 2022

What about just pressing a button? https://meraki.cisco.com/product/sensors/indoor-sensors/mt30/

KarstenI · ‎Aug 26 2022

It could be the Content category "Personal VPN" that you need: https://talosintelligence.com/categories#contentcats

KarstenI · ‎Aug 23 2022

To much tax-hickups when sending to EU in the past?

KarstenI · ‎Aug 23 2022

Well, @PhilipDAth., you are "the one"! Party!!! Congratulations to all.

KarstenI · ‎Aug 19 2022

@CptnCrnch Yep, that is right!

KarstenI · ‎Aug 17 2022

Speed/Duplex settings are configured on the Local status page: https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page AutoNeg is the default, but the MX65 is by far too slow for a 1Gig ISP link. This device has a rating of 250 MBit/s maximum.

KarstenI · ‎Aug 17 2022

And similar (but different) to Philip, I'll give two kudos to everyone who posts a celebration picture of him- or herself wearing Meraki branded underwear! Only that shows the real Meraki Love (I only have socks, so I am out!).

KarstenI · ‎Aug 16 2022

A looooong time ago (yes, far too long) we had a Pub Quiz and that was really fun! (hint, hint ...)

KarstenI · ‎Aug 12 2022

Happy Birthday Community! 🙂

KarstenI · ‎Aug 11 2022

Your screenshot only shows the dedicated config for the Switch-Management. But based on the Model, MS Switches can also be configured with VLANs for inter-VLAN-routing: https://documentation.meraki.com/MS/Layer_3_Switching/MS_Layer_3_Switching_and_Routing

KarstenI · ‎Aug 5 2022

Just some feedback on this. Support was on it for two weeks, but all taken actions didn't help. 2.4 stayed active. Now the support is sure that it is no longer possible. I added a wish to bring back this feature just to be a good RF-citizen.

About KarstenI

KarstenI

Karsten Iwen

Community Record

Badges