- About Bovie2K
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Community Record
39
Posts
39
Kudos
0
Solutions
Badges
a week ago
1 Kudo
Anyone hear anything about IKEv2 or higher than Diffie-Hellman group 5 with IKEv1. I’m a heavy Meraki user but our main firewall is Cisco Firepower. Just upgraded to Firepower 6.5 and they say DH Group 5 is deprecated and will be removed from a future version. Only problem is I have VPN’s with other clients using Meraki MX’s that are stuck at group 5. Dont’t want to point fingers but it seems crazy one side of the shop is that’s deprecated and no longer considered fully secure and the other side is like uhh that’s is high as we go. i know there is the big IPv6 thread and I’m not looking to start that with VPN I’m just wondering when is DH group 14 or 21 coming and then IKEv2.
... View more
09-09-2019
05:48 PM
I have to say I about died laughing when Meraki had the Podcast last weekend on IPv6 and pretty much none of the hardware supports it. The podcast also made it sound like things were coming quickly. Fingers Crossed for the September update. @Meraki-PM-TeamPLEASE BEG management for them to allow you to share more. We all love Meraki hardware its just getting harder and harder to recommend with this glaring hole. Some of the other major firewall stuff we know is coming like ikev2 and objects.
... View more
10-18-2018
09:23 AM
3 Kudos
@Daghan Thanks for the update. Please pass to management the need for an active road map for MX like IPv6, IKEv2, Anyconnect support, network objects and groups (Love that you mentioned this one) and finally Site-to-site inbound firewall (which even shows up on the dashboard). Eagerly awaiting all these features.
... View more
10-17-2018
04:32 PM
2 Kudos
I was told the hardware supports IPv6 but there are some current software packages they need to replace before they can support it.
... View more
09-06-2018
02:13 PM
1 Kudo
I'm most excited about the speed increase but as other posters have noted many home users are able to get Gigabit Internet now at home and while much better than before 450 is still lacking. I'd like to push for a 450 guaranteed but not software cap'ed allowing the firewall to burst to whatever its CPU could sustain. No one is expecting an MX67 to power a 200 person company but to allow a full gigabit would be wonderful. Similar to my MX64 where Meraki advertises 200 megabit on threat defense but I have no problem hitting the 250 megabit software cap. I'd also like to add on we are really hoping for software updates to support IKE v2 VPN , SSL VPN and AnyConnect , and IPv6. Still with that being said really happy for the speed increase.
... View more
09-06-2018
02:01 PM
2 Kudos
@davidvan Thanks for the post. I understand you are limited on what can be said but I think this forum thread is enough to take back to management to show there is a real NEED and WANT for full IPv6 and NAT64 support from MX. Like I said in an earlier post it wouldn't please everyone but even a middle ground of the phone home still using IPv4 but the MX's at least having NAT64 support would be great in the nearer term. Also not knowing is the worst. We don't know if its two years away or two months away. Some statement at all would be helpful. Thanks
... View more
08-22-2018
09:05 AM
4 Kudos
Its not just that they don't have IPv6 its the total radio silence. Not even a we are working on it and expect it by Q whatever 18 or 19. Even if they added it as supportable but still needed IPv4 in the short term to phone home that would be preferable to no IPv6 support period. I would also echo the other comments in this thread that Meraki employees quit calling it a feature. When everyone else supports its no longer a feature its a basic requirement.
... View more
05-10-2018
10:27 AM
1 Kudo
@MerakiDave Could this be like a few years ago when the Z1 got accidentally artificially limited then later the cap was removed?
... View more
05-10-2018
10:25 AM
1 Kudo
This is frustrating both directions. The Z3 is more $$$ than the Z1 yet has less performance. Also limiting it to 100mb makes it a bad choice when many peoples home connections are 250mb or more down and a cheap router can do that speed as a business you give them a Z3 to take home and everything is slower. Yet on the other end I have an MX64 at home and why should a Z1 or Z3 out preform my MX64. Though I can see on Meraki's end why they don't want to impact on their more expensive products. Though still why not stop artificially limiting and just promise actual speeds like say Cisco does. They don't promise a 5506 will do gigabit but in the right situation it will.
... View more
04-18-2018
09:08 AM
1 Kudo
Not to let Meraki off the hook but they use the term Beta differently than other vendors.
... View more
03-20-2018
03:58 PM
Agreed stay with the MX100 and see what you get before upgrading. You may go right up to the Meraki limited speed on the MX100 and be happy with that.
... View more
03-20-2018
03:49 PM
2 Kudos
This happened with the Z1's a few years back where they artificially limited it and then unlimited it. I understand the reason for limiting to protect your business on larger firewalls but these Z1's and Z3's shouldn't be limited. Though with that being said I'd love if they pulled the limit off the MX64.
... View more
01-11-2018
11:27 AM
2 Kudos
@MRCUR Agreed. I heard MS's are getting IPv6 Routing and MR's already have some support its time for MX's to get full IPv6 support. Especially when cheap consumer routers are getting it. I totally understand providing use cases to justify some feature requests but @MRCUR hits the nail with this one the use case is getting the support.
... View more
11-29-2017
10:15 PM
Will do as soon as I hear back from them. Again so far it seems to be instrumentation glitch. So far no devices are actually impacted even though the AP page claims they are getting responses to DHCP and DNS requests all the time. Thanks.
... View more
11-28-2017
02:26 PM
@WANKiller just one. I only have one MR33 at home. All the ones at work are running Stable Firmware. I've left it with 25-8 for awhile no and no actual issues with the clients but the LAN page for the AP on the Meraki website says lots of requests aren't being answered. I'll have to see what support says when they get back to me.
... View more
11-26-2017
02:16 PM
What actual Throughput are Z3 users getting? Also is the Z3 like the Z1 where you get as much t hroughput as the device will give usually much more than the specs say or like an MX where its locked to a software maximum?
... View more
11-26-2017
02:05 PM
@PhilipDAth is right. This is why I like to purchase certs for NPS servers. That way they are already trusted.
... View more
11-26-2017
01:55 PM
@PhilipDAth Bridge mode with VLAN tagging. I have a Public SSID on one VLAN, Private SSDI on another and Mgmt traffic on yet another VLAN with untagged traffic dropped upstream. The AP is plugged directly into an MX64 serving up DHCP and I've tried both google and public dns. Whats weird is after some more investigation this time it looks like it is working correctly (The first time I did this devices weren't getting IP's) the devices are getting IP's and DNS the AP just thinks its not working right. I tried Wireshark and it seemed to confirm that the MX was sending a response. I can also make it happen on a Windows computer buy just doing an ifconfig /renew the computer gets an IP but the AP. Also if it doesn't happen the first time doing it again will make it happen. So anyways it seems its instrumentation rather than an issue. I've reopened my case with support and uploaded screenshots and wireshark captures. I can't explain what happened the first time.
... View more
11-25-2017
03:50 PM
Hello, Having an issue with 25-8 and my MR33. Its stops responding to DNS and DHCP requests to certain clients. (Seems to be Apple but I haven't run it long enough to make sure) as soon as I downgrade to 24-12 it works fine. I first thought it was due to beta firmware on my MX but after upgrading and downgraded realized its the MR. I've tried it 3 times and have the same problem each time. The Lan menu on the AP is showing the unmet requests. It does show the clients do connect to the Wifi they just either don't get a DHCP request or can't get DNS requests. Also I noticed at least for my iPad it keeps working but won't renew its address. I made a case with support and they just had me downgrade which is fine for now I wanted to see of anyone else has the problem.
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 6 | 3070 | |
| 4 | 6949 | |
| 4 | 42609 | |
| 3 | 6915 | |
| 3 | 6081 |
