About ww

ww

What band is the client on? Any info in the wireless heath? No duplex mismatch between switch/ap?

ww

Maybe you have set the local credentials on the dashboard at the network > general page

ww

The subnet is set at the clientvpn option itself. Dhcp is provided from the mx

ww

I guess thats fine then. Are you sure they setup the autovpn routing correct. Like bgp or select vlan to be in vpn.

ww

So your not learning routes in the autovpn? And on other sites it works ? Can you test mtu size from a client at the router ping www.meraki.com -l 1472 -f

ww

Are you talking about the 3rd party vpn? https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Site-to-site_VPN_between_MX_Appliances_in_Different_Organizations It does not learn routes dynamically

ww

If you want to use ip from the native vlan that is set on the switch port your AP connects. Then leave the management vlan at the AP empty. If you want a ip from a tagged vlan then set the vlan at the management setting of the AP

ww

Do you see stp changes on your switch?

ww

Hi, this shows what meraki detects: https://documentation.meraki.com/MR/Monitoring_and_Reporting/Air_Marshal#Wireless_Threats " Rogue SSID seen on LAN: SSIDs that are broadcast by rogue APs and seen on wired LAN; this could suggest compromise of the wired network." But its most likely a client using some kind of screen mirroring or someone set up a hotspot. 1) if its broadcasting, yes 2) if its broadcasting, yes 3) i would say yes but it does not act on this. 4) not sure, but i think if its broadcasting, yes

ww

This is related to the autovpn i assume? Maybe turn off autovpn at the end of you script and enable it when the device is up and running

ww

Good to know. I noticed the same.

ww

Not possible. How about you remove it and set drop untagged on the trunk port

ww

as far as i can find MA-PWR-CORD-EU is a c13. looking at the 350x installation guide the 1025W psu needs c15 cable.

ww

Not available.(yet) We also asked for it. Make sure to make a wish and tell/ask your cisco contacts

ww

Not that i know of. This mentions the same but is 3 years old. https://www.reddit.com/r/meraki/comments/5u2zes/dynamic_vlan_assignment_via_8021x_on_mx6465/ Maybe just ask support , and let us know 🙂

ww

Regarding to the firewall for wan1/wan2. That works only for non vpn traffic.

ww

Check the scope for free addresses. Make packet captures in your network and analyze them to help find where the problem is

ww

Dont use meraki if you want 5 wan links on 1 device

ww

You need to use the sts vpn firewall for restricting vpn traffic

ww

That is expected behaviour Use recommended setup with more downlinks https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair#Recommended_Topologies

ww

Yes

ww

Yes this is the default. Dont advertise a default route in your vpn. And dont set the default route option when selecting a hub at your spokes

ww · ‎11-03-2020

Sound like some stp issue. What stp prio has your nexus and ms250? Maybe better to connect only ms or nexus to the mx and trunk all vlans to the mx.

ww · ‎10-27-2020

Did you take a look at the group policy option that you can assign to a vlan https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying_Group_Policies

ww · ‎10-27-2020

but did it ever work on 4g? because it can be 4g provider related. I would however contact support for help with troubleshooting. packets captures etc.

ww

Community Record

Badges