Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About AndrejRistovsk
AndrejRistovsk
Here to help
Member since Apr 10, 2019
Jun 18 2020
Community Record
10
Posts
5
Kudos
1
Solution
Badges
Nov 14 2019
1:28 PM
Hi there, From the old Cisco ASA firewall i am able to see that the VoIP provider subnet is 89.184.XX.0 255.255.XX.0. So i believe that in the 1:1 NAT in the Remote IPs i will need to replace any with 89.184.XX.0 255.255.XX.0 ?
... View more
Nov 14 2019
1:25 PM
Hi there, For the DM_INLINE_SERVICE_2 For the DM_INLINE_SERVICE_4. I also updated the post :). Thanks in advance.
... View more
Nov 14 2019
3:54 AM
Hi there, I was wondering if somebody can help me out and tell me if i am thinking the right way. I have a old Cisco ASA 5505 and will need to be replaced with Meraki MX67C-WW. On the site i have one PBX server on prem with IP: 192.168.XX.21 and 25 VoIP phones. In my Cisco ASA on the WAN side i have an IP: 82.33.XX.201 When the PBX server on prem is communicating with the VoIP provider it is coming out via 82.33.XX.204 (on of the public IP addresses that are available from my ISP). I have the following object and access list object network Public_VoIP host 82.33.XX.204 object network Net_VoIP_Provider subnet 89.184.XX.0 255.255.XX.0 object network Srv_VoIP_PBX host 192.168.XX.21 And the following access-list access-list Outside_FO_access_in extended permit object-group DM_INLINE_SERVICE_2 any object Srv_VoIP_PBX his is what is under DM_INLINE_SERVICE_2 access-list Outside_FO_access_in extended permit udp any object Srv_VoIP_PBX range 10000 20000 access-list Vlan_Users_access_in_1 extended permit object-group DM_INLINE_SERVICE_4 object Srv_VoIP_PBX object Net_VoIP_Provider This is what is under DM_INLINE_SERVICE_4 Now NAT in Cisco Meraki is a bit different than in Cisco ASA (as far as i can see). On my Cisco Meraki i have done the following settings in 1:1 NAT Will the current settings that i have on the 1:1 NAT in the new Cisco Meraki work with for the PBX and the VoIP system? Many thanks in advanced. Kind regards Andrej
... View more
Sep 10 2019
10:58 AM
1 Kudo
Hi to all, I just wanted to post a solution that worked for me. The solution involved using powershell to create a routing table in Azure classic and associate that routing table to the network that is in classic deployment. Here is a nice document that helped me https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-udr-classic-ps In case anybody else needs some help with this kind of problem i will be more than happy to help :).
... View more
Sep 6 2019
2:56 AM
Hi PhilipDAth, Thank you for the reply. I have been trying that too and was following the documentation, guides but unfortunately never got it working. The VPN tunnel never got established :(. Have you come across some useful documentation that can help me to try again? Thanks in advanced.
... View more
Sep 6 2019
2:54 AM
Hi Happiman, The thing is that this is not possible when there is a network and a server farm deployed in the classic environment. You are not able to associate the vnet that is deployed in the classic environment with routing table. I send the same question to Microsoft support and will share the solution when they will reply to me. Thanks for the feedback :).
... View more
Sep 5 2019
7:10 AM
Hi there, The company that I am working for is implementing MerakiMX on-prem and in Azure. On prem I have: - one MerakiMX64 with subnet 192.168.20.0/24 and a Client1 with ip: 192.168.20.2 that is behind MerakiMX64 On Azure I have: - one vMX100 on a vnet called meraki-lan. The vMX100 has IP: 192.32.0.4, subnet 192.32.0.0/24 - one server farm that is deployed in classic architecture (older one). The servers are connected to a vnet1 that is in classic deployment. Subnet for the servers 192.31.0.0/25. There is one more subnet called GatewaySubnetV1 192.31.0.128/29, this one is used to make a vpn-site-to-site connection via virtual gateway to GatewaySubnetV2. - one server farm that is deployed in modern architecture. The servers are connected to a vnet2 that is in modern deployment . Subnet for the servers 192.32.0.0/25. There is one more subnet called GatewaySubnetV2 192.32.0.248/29, this subnet is used to make a vpn site-to-site connection with the GatewaySubnetV1 192.31.0.128/29 I have done peering between meraki-lan and vnet1 and meraki-lan and vnet2. There is a routing table that I have put the local subnet 192.168.20.0/24 and associated that subnet to vnet2. Now everything works as it should between 192.168.20.0/24 and server farm that is deployed in modern architecture, vnet2. From Client1 I am accessing all servers on vnet2 (modern architecture) However I am not able to communicate between the MerakiMX64 or Client1 to servers in vnet2(classic architecture). I am not able to find how to make an association from meraki-lan to vnet1 (classic architecture). Any advice how to solve this problem? Thanks J.
... View more
Aug 22 2019
1:14 AM
Hi there. I am working on a exciting project that involves migration of 11 Cisco ASA firewalls (from 5505 to 5515). Some of the sites are in Spoke--Hub topology. All 11 Cisco ASA firewalls are going to be replaced with Meraki MX appliance. Now i have build a physical LAB environment with real Cisco ASA 5505 and 5510 equipment + first Meraki MX device and are trying to accomplish the following - On site 1 i have Cisco ASA5510 with public IP from the ISP for the outside interface. On the inside interface i have 172.168.5.0/24 subnet - On site 2 i have Cisco ASA5505 with public IP from the IPS for the outside interface. On the inside interface i have 172.168.20.0/24 subnet. Between both site 1 and site 2 there is an IPsec tunnel established and it works just fine. Now i am trying to simulate physical switching on site 2 from cisco asa to Meraki MX68CW-WW. On the Meraki MX68CW-WW i have only 4G internet connection for now. I have been following the guide for creating a VPN site to site guide with help of this link https://documentation.meraki.com/MX/Site-to-site_VPN/MX_to_Cisco_ASA_Site-to-site_VPN_Setup however my question is if Meraki MX can establish a VPN site to site connection with ASA via 4G? Any advise is appreciated.
... View more
May 14 2019
1:00 AM
Hi to all, I am working in a company that has 11 offices world wide. We have a hybrid environment and using O365, Dynamics in Azure in the classic portal (not Dynamic 365), local file sharing etc. Today there is VPN IPSEC between 11 sites. Additionally some of the offices in the same country that are connected with MPLS. We want to improve our network security and increase the network performance since we are experiencing slow network work general (both internal and external). Almost two months we have been evaluating the Cisco Meraki solution (SD-WAN appliance MX67C-WW, small l2 MS120-8LP switches and AP MR33). We really like the products and the way how you can manage your network I have few question regarding optimizing the traffic and using SD-WAN and traffic shaping. 1. As far as i have understood SD-WAN and traffic shaping is the same as QoS or maybe not? 2. For instance if i have Site-to-Site VPN between two sites that are in a Hub connection then i need to have the same settings applied on both SD WAN appliances configured in SD-WAN and traffic shaping ? 3. Scenario when you have three offices connected with MPLS. Office 2 and 3 reach internet via office 1. Is it correct that if you want to optimize the traffic for the three offices you need to coordinate QoS rules with the ISP that is providing the MPLS connection? Thanks in advanced for any advise.
... View more
May 9 2019
4:33 AM
4 Kudos
Hi to all, I am working as an IT System Administrator at a international clinical research company called Trial Support Support. Around 1 month ago we got a demo Cisco meraki products for testing and evaluation. I have a twin brother that works in the same company as I :).
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 3665 | Sep 10 2019 10:58 AM |
My Top Kudoed Posts
© 2024 Cisco Systems, Inc.
