About ww

ww

No. Source can only be a local vlan of local subnet from a static route

ww

@RaphaelL are the mx250 and 450 on the same firmware?

ww

these ones are "supported" https://documentation.meraki.com/MX/Cellular/3G%2F%2F4G_Cellular_Failover_with_USB_Modems

ww

Well transmit strength is lower because off the antenna gain. you have to stay within the limit of your region. For example unii3 can use 30dB but you gain from antenna is 10. Then you can only set the ap itself to max 20dBm EIRP = transmit strength (dBm) + antenna gain (dBi) – cable loss (dB)

ww

Ant27 gain is about 9 dBi. So 13 sounds ok What channel on 5ghz? https://documentation.meraki.com/MR/Radio_Settings/EU_Compliance_Information

ww

This is where you apply it https://developer.cisco.com/meraki/api-v1/#!update-device-switch-port

ww

That is not possible with any license. There is also no status indicator if the fw or filter works or not. So its also not possible with the api.

ww

Most clients are only 2x2, on 80MHz you lucky to get around 800Mbit. Most cases you still run 40 or 20MHz (+/- 400 or 200Mbit) i.m.o for wifi6 Gbit is fine. at wifi6e mgig gets interesting.

ww

https://documentation.meraki.com/MS/Deployment_Guides/Advanced_MS_Setup_Guide#Rapid-PVST

ww

Check the link in this post https://community.meraki.com/t5/Security-SD-WAN/Question-regarding-isolated-VLAN-for-WAN-breakout/m-p/130848#M32689

ww

Mx in one armed concentrator mode can run bgp Mx in routed mode does not use dynamic routing protocol on wan. I just need 1 ip address (Or for warm spare 2 or 3(if you want vip) All other ip/traffic is inside the vpn and not seen by the mpls. Or behind that wan ip that is used as nat address by the lan subnet. In that case it would be static

ww

❤️

ww

With the group policy attached to vlan traffic will come in, but all returning traffic will be dropped.

ww

How is the switch port it connects to configured. The router has this vlans and assign dhcp?

ww

For vpn traffic you need to use vpn firewall, but that does not work for incoming traffic from 3rd party vpn. Only option is to use a group policy with stateless rules assigned to a vlan

ww

I dont know the ms120 but isnt it just layer2? It does not have a arp table? I think you hairpin packets on the ms and that messes up reporting. I supose it would be better to connect isp router to the firewall if you would like that corrected

ww

Disable band steering on the rf profile assigned to your ap's Did you also set lowest rates on the rf profile?

ww

Thats just 3 access ports in vlan 700 on the switch. No svi ip needed. The wan interfaces of the mx you can assign ip from the isp provided subnet

ww

Sounds like its broken https://community.meraki.com/t5/Dashboard-Administration/Scheduled-Reports-missing/m-p/130530

ww

Are these dropping clients mostly connected to 2.4ghz radio? Can you check for high inteference on that location? https://documentation.meraki.com/MR/Monitoring_and_Reporting/Common_Wireless_Event_Log_Messages#802.11_Event_Log_Messages

ww

So you can move from 90 to 100 to 95 But not from 90 to 95. Hmmm thats funny

ww

Never seen this message. Did you verify all trunk connection use the same native and allowed vlans on both sides

ww

It also depends how your traffic will flow. If you using vlans on the mx to use security and fw rules between vlans then i would look at the active user count. And then you maybe want 10Gbit connection to the lan side If you just want to use it as internet router and most flows never leave you switches. Then you can consider using a bit lower model. But dont cheap out to much and design for the future like @DHAnderson says

ww

If the route is also learned and advertised at the hub2 then yes.

ww

You cant set the same subnet-vlan from spokes in vpn. If it are identical learned routes then the spoke chooses the first selected hub

ww

Community Record

Badges