Meraki

jumpy · ‎Jun 12 2021

Can I use WAN IP configured on spare MX to initial firmware updates and change it to primary WAN IP after old MXes are switches off? One more thing I'm concerning is hub selection on each spoke node after creating a new clone network. Since this MX act as a hub and there are 20+ spokes, I'm not sure that I have to configure a hub selection on each spoke manually, or I have to disable VPN settings on the old network and then enable the VPN on the new network so all spoke will be select new MX as hub automatically.

jumpy · ‎Jun 12 2021

I only have 2 MXes in the network. So, I think I can go with my procedure. But I'm not sure if the IP address conflict may happen when I create the clone network. Also, how long of Site-to-Site VPN establish connection will take.

jumpy · ‎Jun 12 2021

I'm planning to migrate HA MX84 to HA MX100 with minimal downtime. https://documentation.meraki.com/MX/Other_Topics/MX_Cold_Swap_Replacing_an_Existing_MX_with_a_Different_MX#Method_1_(Quick_Swap) As document above, should I go for Method 2 as downtime will only happen when I swap the WAN/LAN cable? From my understanding, If I go for method 1. The connectivity goes down after I remove the old MX in the network and will come back again when the new MX finished firmware upgrade and configuration sync. Please check the procedure if any wrong. 1. Create Clone Network from existing Network 2. Add new MX100 to Clone Network 3. Config warm spare on Clone Network 4. Unplug WAN2 from the old MX84 and plug into WAN2 on new MX100 for firmware upgrade and configuration sync. 5. When MX100 is ready on Clone network. Move all WAN1/LAN cables from the old MX84 to the new MX100. 6. Re-enable Site-to-Site VPN 7. Delete old network Thank you

jumpy · ‎Aug 4 2019

Hi @PhilipDAth and @Seshu, Thank you for your advice but I'm sorry to say that my MX84 is running on Enterprise license. So, there is no "Intrusion detection and prevention" available.

jumpy · ‎Aug 4 2019

Hi @BrechtSchamp I have pointed to MX84 because the problem started since I installed MX84.

jumpy · ‎Aug 4 2019

Hi there, Does anyone have experince of implementing Meraki firewall along with ArGo mail server? My mail server isn't working properly after I install MX84. A lot of pending emails got stuck in the outbox of mail server but it happens occasionally. it took around 10 mins to delivered success. - I have checked bandwith on the MX84 and it's not full when the problem occurred. - Rule checked on the MX84 (Allow any any at the end). - I have set the mail server as whitelist in MX84. - No endpoint firewall on the mail server Outbox of Mail server when the problem occurred Below is ArGo mail server setting. Please help me on this. Thank you

jumpy · ‎Jul 23 2019

Hi Ajit, Thank you for your advice but I have done as you said before and it's not work.. So, I have tried to configure as Trunk and it's work! Client can go both VPN and internet but group policy is not working as gp applied in VLAN . Client can access to Youtube even I have blocked it in group policy.

jumpy · ‎Jul 21 2019

Hi Phiilip, Sorry I missed some point to explain. I need to do scheduling policy which group policy can afford me.

jumpy · ‎Jul 21 2019

Hi there, I'm newbie to Meraki and having some problem group policy in VLAN. There are 2 sites in my client environments HQ and branch. HQ has one MX86 and branch has one MX64. They also do Site to Site VPN. For HQ, Applying group policy in VLAN is working properly but not the branch. After appiled policy in VLAN, Client cannot go outside either HQ or internet. I have checked the policy and no deny rule there. Just only Youtube not allowed. There is something suspicious that the branch basically use single LAN(Disabled VLAN). In order to apply policy to all client, I have to enable VLAN and then clients can't go outside after that. Currently, I have done alternative way which is applying policy by client that no need to do VLAN enabled. I think the problem is about VLAN. May I have some advice from you guys on this? PS. The branch has 2 unmanaged switches. Thank you

Meraki

Community

About jumpy

jumpy

Community Record

Badges

Re: Migrate HA MX84 to HA MX100 Procedure

Re: Migrate HA MX84 to HA MX100 Procedure

Migrate HA MX84 to HA MX100 Procedure

Re: Meraki MX84 and ArGo Mail Server

Re: Meraki MX84 and ArGo Mail Server

Meraki MX84 and ArGo Mail Server

Re: Group policy for VLAN problem

Re: Group policy for VLAN problem

Group policy for VLAN problem