Meraki

CptnCrnch · ‎Mar 24 2022

You're probably best of with using a vMX in AWS that will natively be part of an AutoVPN setup. All RADIUS requests will then be transported over that encrypted connection.

CptnCrnch · ‎Mar 24 2022

Please take a look at this thread. TLDR: it's already addressed and will be fixed soon.

CptnCrnch · ‎Mar 24 2022

It may take a few days until it's rolled out to your region / shard. Just give it a little time and it will show up.

CptnCrnch · ‎Mar 24 2022

Exactly. In VPN concentrator mode, only WAN 1 is useable.

CptnCrnch · ‎Mar 23 2022

Same here. Zero issues with Policy Objects so far.

CptnCrnch · ‎Mar 23 2022

You can simply use Load Balancing over your two WAN links: https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences#Load_Balancing

CptnCrnch · ‎Mar 21 2022

Its being rolled out in batches (as far as I understood) and not as a one-shot operation worldwide. Just give it a little time. 👍

CptnCrnch · ‎Mar 21 2022

I've already seen it working on MX64 in the meantime. Perhaps it's not yet rolled out onto your shard. So I guess I stand corrected, but a big fat "thank you Meraki for making it possible"! 😎

CptnCrnch · ‎Mar 21 2022

Same here

CptnCrnch · ‎Mar 19 2022

Sorry to say that, but I guess the answer will be: no.

CptnCrnch · ‎Mar 18 2022

You'll have to generate two separate CSRs, so there will be two different private keys and therefore two separate certificates in the end.

CptnCrnch · ‎Mar 18 2022

What about this one? https://documentation.meraki.com/MX/AnyConnect_on_the_MX_Appliance/AnyConnect_Azure_AD_SAML_Configuration

CptnCrnch · ‎Mar 18 2022

First of all: existing certs cannot be used, you'll have to create the CSR to use this feature. I'll try Wildcard certificate support this weekend and give an update.

CptnCrnch · ‎Mar 18 2022

I just learned that is possible now. Thanks for that, unfortunately, I don't have an answer (yet). 😉

CptnCrnch · ‎Mar 18 2022

According to this thread, it seems to be working on Z3.

CptnCrnch · ‎Mar 18 2022

As MX64 is End of Life'd, there just one way: upgrade to MX67 (or MX75 directly).

CptnCrnch · ‎Mar 17 2022

As MX64 is being End of Life'd, I'm pretty sure we won't see Anyconnect on these boxes anymore.

CptnCrnch · ‎Mar 16 2022

Thanks for the proactive approach @PaulF!

CptnCrnch · ‎Mar 16 2022

Meraki is slowly becoming the one stop shop for small to medium sized customers! 👍

CptnCrnch · ‎Mar 16 2022

From my point of view (and several customers too): yes

CptnCrnch · ‎Mar 15 2022

There is no solution, at least not using user credentials. If you really want auto logon, just go the certificate based authentication route.

CptnCrnch · ‎Mar 15 2022

No, MX will filter anything on and above Layer 3.

CptnCrnch · ‎Mar 14 2022

This can be done by building "3rd Party Tunnels" to your Cloud Security provider, but won't be anywhere as flexible as native AutoVPN e.g. using the native Umbrella integration.

CptnCrnch · ‎Mar 14 2022

The limitations are mentioned here: https://documentation.meraki.com/MX/Meraki_Umbrella_SDWAN_Connector/Deployment_Guide#Sizing_Considerations As you always have two seperate tunnels running, you could simply use MX's SD-WAN Policy feature: https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/SD-WAN_and_Traffic_Shaping#SD-WAN_policies

CptnCrnch · ‎Mar 14 2022

Woohoo, it's swag time again! 😎 Good luck to everybody!

About CptnCrnch

CptnCrnch

Chris

Community Record

Badges