The Meraki Community
Register or Sign in
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • About tomas209ca
tomas209ca

tomas209ca

Getting noticed

Member since Apr 17, 2019

Tuesday
Kudos from
User Count
southpaw001
southpaw001
1
WillFulmer
WillFulmer
1
Twitch
Twitch
1
PhilipDAth
Kind of a big deal PhilipDAth
2
View All
Kudos given to
User Count
PhilipDAth
Kind of a big deal PhilipDAth
1
cmr
Kind of a big deal cmr
1
ciph3r
ciph3r
1
View All

Community Record

29
Posts
5
Kudos
0
Solutions

Badges

First 5 Posts
Lift-Off
Points Contest - Apr 2019 View All
Latest Contributions by tomas209ca
  • Topics tomas209ca has Participated In
  • Latest Contributions by tomas209ca

Re: VMX Static Route - Next Hop IP?

by tomas209ca in Security / SD-WAN
4 weeks ago
4 weeks ago
I believe you will want to deploy the VMX in concentration mode. Routed mode is still not fully supported or still has issues. ... View more

Re: Performance issues on MX100 running versions 16.6 or 17.6?

by tomas209ca in Security / SD-WAN
‎12-15-2022 08:24 AM
‎12-15-2022 08:24 AM
Hello,   i worked with support on this and they pretty much are saying i am running the MX100 to it limits due to how many site to site vpns, active clients, etc. Also with the security improvement from firmware 15 and 16 , is also why i am see overall throughput do down. Im assuming they tell me that i pretty much need to upgrade in firewall to mx105 maybe ? The issue is that overall outside download doesn't go down, but inter-vlan thourput is having issues.   IDS off = 652-677mbs Detection/Connectivity drops to 400mbs +/- Detection/balance drops to 241 mbs +/- Detection/security drops to 223mbs +/- Detection/Connectivity drop 248mbs to 451mbs +/- Prevention/Balanced drops to 228mbs to 455 mbs +/- Prevention/Security drops to 233 mbs +/-     ... View more

Re: Configure AnyConnect on a VMX in Azure

by tomas209ca in Security / SD-WAN
‎12-15-2022 08:08 AM
‎12-15-2022 08:08 AM
ccietdb,   i have tried this on my vmx and it works for for any connect. The only thing is when i associate the NSG to the sub-net it kill everything and then i am not able to get to my server in azure. Take this NSG off and im good to go again. I also have NSG on my server also. The MX has a Standard static Wan ip and is in Zone, but Zone failover isnt used. vMX has the vNet and subnet created first before making the resource for the vMX. Thank you. ... View more

Re: Performance issues on MX100 running versions 16.6 or 17.6?

by tomas209ca in Security / SD-WAN
‎11-29-2022 04:25 PM
‎11-29-2022 04:25 PM
Im still having issue with MX100 and IDS. I am on the advance security license also. I reached out to support but they dont know when there will be a fix for this. Currently have IDS off, due to the it on the mx drops it down to 200 to 300. This causes issue for inter-vlan routing also. ... View more

Re: Intrusion detection and prevention

by tomas209ca in Security / SD-WAN
‎10-28-2022 07:50 AM
1 Kudo
‎10-28-2022 07:50 AM
1 Kudo
I been troubleshooting this issue because I was seeing slow speed at the core sw and MX100. With each new firmware on 16 and 17, throughput is getting less and less. From speaking with meraki support, there might be bug/issue with IDS. I have tried multiple setting on IDS and still limited from 180mbs to around 300mbs. This issue can be address by adding a layer 3 sw and limit what the FW needs to do. This also effects inter-vlan routing. Currently running IDS turned off. ... View more

Re: Z3 Firmware updates need 16.16.1

by tomas209ca in Security / SD-WAN
‎04-15-2022 10:49 AM
‎04-15-2022 10:49 AM
I had this bug knock out some z3/c and now will have to do some driving around to get them up. I think this also has issue with any z3/c that is on any firmware 16.x, as i have some that have gone offline but still pass traffic but not manageable via dashboard.  No way to get them up. ... View more

Re: Firmware upgrade MX 16.x

by tomas209ca in Security / SD-WAN
‎01-31-2022 02:53 PM
‎01-31-2022 02:53 PM
i had these happened the last couple week and they have been going away. Biggest one i have now are mask-api.icloud.com ... View more

Re: Inseego USB Cellular Modem Compatibility

by tomas209ca in Security / SD-WAN
‎01-27-2022 03:44 PM
1 Kudo
‎01-27-2022 03:44 PM
1 Kudo
Only thing that i have used in production have been the Pantech 295 or Novatel 730L with Verizon. USB are hit or miss at times. With New firmware they have become less reliable for usb modems. Only way for me to keep stable connection would be with a Cradlepoint CBA850. The other one we have used have been netgear 4g modems.   Edit. Looking inot the insego is liekthe 730L, you need to make sure that modem in setup for end user and has the device id of 9030 or it wont work on the meraki. Also to get to this section you need to access with computer at 192.168.1.1/labtestinfo ... View more

Re: Client VPN not connection with Win10

by tomas209ca in Security / SD-WAN
‎01-26-2022 02:57 PM
‎01-26-2022 02:57 PM
I had same issue with windows update KB50009543 was braking vpn client. After uninstall and rebooting, then adjusting network adapter setting for client vpn, everything was good to go. ... View more

vMX - NSG

by tomas209ca in Security / SD-WAN
‎05-15-2020 10:31 AM
1 Kudo
‎05-15-2020 10:31 AM
1 Kudo
Morning All,       In regards to vMX100 and azure. For security of the vMX100 vm, is proper to add a Network Security Group to it due to it Port Forward enabled on it by default. I tried adding one or combining it to my other NSG i have for my VMs. Was not able to get it to working. Is this something that can be ignore ?     ... View more

IDS Snort rules

by tomas209ca in Security / SD-WAN
‎04-02-2020 02:23 PM
‎04-02-2020 02:23 PM
Afternoon all,      I been grinding my gear for the last couple of days in regards to IDS snort rule causing maybe a false positive. IDS rule went out Mar 31  2.9.11.1, which started alerting us of varies port scan going on in our internal network across all computers. We couldn't identify the culprit other then IDS was picking  on maybe Dropbox lan sync. This was only happening at our 3 Main hubs which are mx100s and 84s. There has been an update to snort rule that was pushed out  this afternoon.This has calmed things down.   For the IDS support or question, do we go thru meraki or SNORT.org, talos for further information on these rules, patch notes.       ... View more

Re: Firmware updates

by tomas209ca in Security / SD-WAN
‎11-05-2019 02:38 PM
‎11-05-2019 02:38 PM
i installed the beta manaully, but the auto beta firmware is off under General. ... View more

Firmware updates

by tomas209ca in Security / SD-WAN
‎11-05-2019 02:20 PM
‎11-05-2019 02:20 PM
I had some random updates get schedule by meraki for some reason. They are being updated to 15.21 even though  i have beta firmware update off. I currently have 15.17-18 in production. I have cancel them for now. Just wondering why they would get pushed out for install. ... View more

Re: Source IP and/or VLAN mismatch

by tomas209ca in Security / SD-WAN
‎11-05-2019 01:56 PM
‎11-05-2019 01:56 PM
i have those in my network also, but it comes down to our where we have vlan mismatch on each end or the native vlan is not the same across the board. If you have issue with pc and voip. This will cause issue expecally if you dont have DHCP option 150. ... View more

Re: Verizon 730L and MX64

by tomas209ca in Security / SD-WAN
‎09-20-2019 09:22 AM
‎09-20-2019 09:22 AM
This is what is needed to be done for those that receive 730L that will not work with you MX security appliance. Also if you don't now what the ID is , you can go to device manager and look for Remote NDIS Compatible device. From there you can go to event tab and it will give you the info on the PID or you can got to details>hardware Ids. I think also those that are on 9031 show up as RREMOTE NDIS Compatible device#2, i believe. ... View more

Re: client vpn mx64

by tomas209ca in Security / SD-WAN
‎09-19-2019 11:56 AM
‎09-19-2019 11:56 AM
i think there is an issue with Client VPN on mobile android and also more so if on t mobile, since they are specifically ipv6 ... View more

Re: Verizon 730L and MX64

by tomas209ca in Security / SD-WAN
‎08-23-2019 09:53 AM
‎08-23-2019 09:53 AM
I purchased about 7 to 8 new 730L from verizon and they didn't work. Also tried setting them up to end user mode, but that didn't help either. I ended up re purposing UML 290 or 295 modems, they been working without issues. I just been using these modem for MX64 that are in remote area for emergency failover. ... View more

3 Hubs and 37 spokes ?

by tomas209ca in Security / SD-WAN
‎08-09-2019 12:48 PM
‎08-09-2019 12:48 PM
Afternoon all,   Currently almost coming to an end of  Meraki migration form 881s.   MY site are divided by 3 main location that have AD servers and call manager at each HQ.   Site A -mx 84 has about 17 mx 64 sites to include is HQ2. Has MPLS not in use. Currently in spoke Site B - mx100 has about 10 mx64 sites to include it HQ1. Has MPLS in use to connect to site c Site C - mx84 has about 13-mx64 sites to include its HQ3. Has MPLS has MPLS to connect site A   All 3 sites have fail over WANS, each spoke has either a dual fail WAN or USB Modem for fail over or both.   Currently Site B is Only a HUB. Would it be best for each site to be their own hub and have with their remote site as spokes or should i make site Site C/A as spoke also to connect to Site A Hub or am i looking at at Hub and spoke the worng way. What would be the best way to go about this.    We are pulling SG200, 300, some 500 out and replacing them with Unifi PoE switching and our site B will have 2 XG 16 connecting multiple VM server host and synology server ,and another xg16 for connecting all swithces. Only issue i have ran into are some UDP dropps, but they might be another issue unless the mx100 is having issue. Voip is working find but some backups are failing to transfer to site C.           ... View more

Re: Verizon 730L and MX64

by tomas209ca in Security / SD-WAN
‎08-09-2019 09:42 AM
‎08-09-2019 09:42 AM
as of right now not that i now, unless you can pull it from mx API. Only time i am able to get data from the usb modem is when it fails, and the only thing is either on the uplink info or appliance status. Also maybe in the Event Logs also. I do recall opening a case and i think Meraki tech might be able to, but not 100% sure though. ... View more

Re: Verizon 730L and MX64

by tomas209ca in Security / SD-WAN
‎08-07-2019 08:58 AM
‎08-07-2019 08:58 AM
As for SIM, phone number, IMEI, I got the info from the Verizon Business account that our company has.Or if they he other site are close to you, you can go to them and get the info by plugging them into the a computer and http tot he gatewya ip of the USB. Currently have about 33 deployed to sites.  As for the Device ID, i had to actually plug it into the computer to get that number. As for IP this will depend if you have static ip to them or not. You have to pay a one time fee to get these public ip allocated to you. This has to be done on the verizon side. The static ip come in hand if you need to do port forwarding. ... View more

Re: Meraki MX and UniFi AP

by tomas209ca in Security / SD-WAN
‎05-03-2019 09:44 AM
1 Kudo
‎05-03-2019 09:44 AM
1 Kudo
Which Unifi AP are you using?   I have multiple Unifi AP (Outdoor/+, Mesh AC, Mesh Pro), which they are controlled thru Unifi controller. The switch are unifi running in conjunction with MX 64.   You might issue where the AP my be stuck due change of controller or location of where it was first adopted. Alot of this happeneds due to the Unifi default inform-set is set to http://unifi.8080, something like. Uusually i have to set the inform set to the specifuc WAN ip of the controller that is ip so the AP nows where to go to grab or be setup, etc.   You might want to reset the AP to default setting and re adopt. ... View more

Re: Verizon 730L and MX64

by tomas209ca in Security / SD-WAN
‎04-22-2019 07:58 AM
‎04-22-2019 07:58 AM
Currently it is a hit or miss with finding 730L with specific USB ID. The only one that are not bound by specific USB ID are the Pantech UML 295. There might be other but our is Verizon. ... View more

Re: Verizon 730L and MX64

by tomas209ca in Security / SD-WAN
‎04-19-2019 03:06 PM
‎04-19-2019 03:06 PM
Did already nothing can be done per support on this issue and that i need to use the  specific USB with that specific USB ID. ... View more

Re: Verizon 730L and MX64

by tomas209ca in Security / SD-WAN
‎04-19-2019 02:38 PM
1 Kudo
‎04-19-2019 02:38 PM
1 Kudo
The issue has come down that the older version of 730L used USB ID or hardware ID of 1410 9030 and the current new 730L are using 1410 9031, which for some reason isnt supported by meraki mx per documentation.   you can pull the usb using linux or i used the device manager and thru hardware id and you see the info of the USB modem. As of right now there is no time table as to when these will be supported via firmware per support. ... View more

Re: Verizon 730L and MX64

by tomas209ca in Security / SD-WAN
‎04-18-2019 11:54 AM
‎04-18-2019 11:54 AM
@Cmiller The 620 is listed toward  a second part of the list in the end of sale section . To my understanding the the 620 will not work with meraki made after 2017 , I think   I connect the wan to to the 730 because it needs to connected first that for first initialization per modem the link should, which is the one I been following  for a while and it was linked to me by the support case that was opened about this issue.   I have a bunch of cradle point laying around because that is what the mx64 are replacing. Cradle point are great. We are trying to minimize  network equipment at remote non man sites. ... View more
Kudos from
User Count
southpaw001
southpaw001
1
WillFulmer
WillFulmer
1
Twitch
Twitch
1
PhilipDAth
Kind of a big deal PhilipDAth
2
View All
Kudos given to
User Count
PhilipDAth
Kind of a big deal PhilipDAth
1
cmr
Kind of a big deal cmr
1
ciph3r
ciph3r
1
View All
My Top Kudoed Posts
Subject Kudos Views

Re: Intrusion detection and prevention

Security / SD-WAN
1 664

Re: Inseego USB Cellular Modem Compatibility

Security / SD-WAN
1 1118

vMX - NSG

Security / SD-WAN
1 1104

Re: Meraki MX and UniFi AP

Security / SD-WAN
1 14912

Re: Verizon 730L and MX64

Security / SD-WAN
1 9587
View All
Powered by Khoros
custom.footer.
  • Community Guidelines
  • Cisco Privacy
  • Khoros Privacy
  • Privacy Settings
  • Terms of Use
© 2023 Meraki