Hi UCcert, I think @ww has pointed me in the right direction, as youalso mentioned I will also run the packet capture to see what is happening, thx.
... View more
We have been trying to get this feature to work with a Z1 (running 15.35 firmware) and have not had any success. We have followed this document (https://documentation.meraki.com/MX/Site-to-site_VPN/VPN_Full-Tunnel_Exclusion_(IP%2F%2FURL_Based_Local_Internet_Breakout)) to split out ipchicken.com, but it does not appear to exclude the traffic. We are not advertising a conflicting default route either.
... View more
Hey Everyone, Just wanted to confirm what Gary has posted as the solution on this thread. If anyone has any lingering issues, please check in with your ISPs and/or reach out to Meraki Support. If anyone has any specific questions for myself please don't hesitate to send me a DM. Rodrigo Meraki Support
... View more
I would aks myself if an "outgoing layer 3 deny all rule" is still best practice... what would the reason be to block ALL outgoing traffic to internet. Yes it is the most secure... secure what? Malware wil just use normal ports and without something like AMP, of layer7 firewalling it wil just make a connection to some server on a default http or https port because 99% of the firewalls have that allow rule..
... View more
To make this work you would need to get your cellular provider to give you a static IP address with no inbound filtering. Very few carriers do this globally. So you are not likely to succeed using this approach. Your best bet is to deploy a VMX into Azure and use that for the VPN. It will work with 4G connected MXs. https://meraki.cisco.com/products/appliances/vmx100
... View more
Hi all, So I think I found the problem, I looked in the Per-port VLAN Settings and LAN ports were disabled by default! Haven't seen this before, not sure why it would be disabled, anyway I've enabled them now and will head out to the branch to test. Thx
... View more
Hi Julian, There where two things which support helped me with, I had to make sure my custom APN was correct and then I had to ensure that the new config had sync'ed before I pulled the lan cable, after that it worked on LTE after a reboot.
... View more
