Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Steve-Potter
Steve-Potter
Getting noticed
Member since Nov 7, 2017
Jul 14 2023
Community Record
26
Posts
4
Kudos
1
Solution
Badges
Jul 12 2023
1:57 AM
Update: Strangely again, it started working today, and looking at the dashboard, the order of port forwarding rules has changed with the port 444 placed first....hmm Steve
... View more
Jul 11 2023
6:12 AM
I have a strange config issue here Internal web server with a few sites accessible via https 443 from specific IP's name uplink protocol public port Lan IP local port allowed remote IPs webserver Both TCP 443 192.168.1.1 443 a list of 20-30 ip's for access & pingdom etc. All works fine, website is IP restricted and operates as it should internally and externally from the remote IPs listed. I now want to add a different port forward for another service, this is using a different port, and works fine internally but not from external, UNLESS the external IP is in the previous port forwards allowed remote IP list name uplink protocol public port Lan IP local port allowed remote IPs status Both TCP 444 192.168.1.1 444 Any It seems the first entry allowed remote IP's overrule the subsequent allow list, even when configuring a different local IP the Any IP doesn't work, but the previous list does... I might be missing something here but logically it should work. PS I know I can add multiple 1:1 NAT's but need to know about this. Thanks Steve
... View more
Jun 29 2022
5:06 AM
Is this the correct method, or one of them.
... View more
Jun 29 2022
2:41 AM
Yes same here active/active only 200Mb on each but scope to go to 2GB
... View more
Jun 29 2022
2:40 AM
Thanks all for the info and help Just had info back from Gamma, each has two ports as per diagram. (they) say the L2 switch is required for the VRRP packets, but I wonder if they couldn't just use an interconnect between each for VRRP... something I will discuss with their tech support. Still I guess I can add another L2 switch and link them together across two ports each letting STP stop the loop.
... View more
Jun 29 2022
1:33 AM
isn't the 5 port switch a single point of failure? or have you two one for each router? The Internet is by Gamma using OpenReach diverse Plus fibre routes and they own up to the ports of the OneAccess routers.
... View more
Jun 29 2022
1:25 AM
Not sure on the OneAccess routers yet as they haven't been delivered, BT are outside blowing the new fibre in as we speak.. The supplier is Gamma and its their network & BGP. I think the only time we need a specific ip address outbound is for access to our website management portal but I think we could add the second IP to that access list.
... View more
Jun 28 2022
9:39 AM
Currently I have a simple network, BT Fibre + vDSL to a MX85 and a MS Switch Stack Our ISP is upgrading us to a diverse routed pair of fibre connections via a pair of routers with VRRP terminating in a L2 switch (actually a Meraki Go 24 port switch) I am also adding a MX85 warm spare (was going to be much later on but was delivered early) Is it best just to follow the configuration guides and connect to the switch on both ports of each MX85 to the L2 switch and Lan ports to the Switch Stack With the new fibre install I have 3 IP's per subnet, and I would lose another 1 of each subnet if I went the virtual IP VRRP method with the MX's Is there a way to miss out the L2 switch and go direct from routers to MX's? anyone suggest the best way to do this, (or simplest as I am by no means expert)
... View more
Aug 13 2019
10:48 PM
1 Kudo
Digital Transformation is just another annoying buzzword the world could do without.
... View more
Oct 31 2018
2:24 AM
Public IP removed but same for both, yes I use MR access points, but Bluetooth not enabled on devices. 1st Device Entry Network LAN IP: 192.168.110.121 Public IP: xx.xx.xx.xx Wireless adapter: Killer Wireless-n/a/ac 1535 Wireless Network Adapter (v. 12.0.0.720) 2nd Device Entry Network Public IP: xx.xx.xx.xx WiFi MAC: 9E:B6:D0:FE:9C:BF Bluetooth MAC: -
... View more
Oct 30 2018
3:25 AM
1 Kudo
Not Solved! I have reproduced this phenomenon on our production network, almost every windows 10 laptop produces two distinct device entries, these entries have different management capabilities so you need both the make the most of MDM. But I cannot see how this could be an acceptable solution, its a kludge to me, but workable and messy. Regards Steve
... View more
Oct 4 2018
5:19 AM
Could I use a Lan address to the Wan port on a Z3. Its for a home with detached office, the home has a BT hub, the office is the other end of a 1Gb fibre link (with converters), the Z3 will be connected to the Head Office via VPN, I don't really want to change the house kit if I can help it. Internet -> BT Hub -> Port 1 -> House Lan -> Port 2 -> 1Gb Fibre Converter -> FO Cable -> Finre Converter -> Z3 -> Office Lan The office lan on a different Nat subnet, the tunnel passes via BT hub to Head office and ignores all the X boxes and iPads etc in the house I don't think the BT Hub can do transparent mode Regards Steve
... View more
May 22 2018
5:15 AM
1 Kudo
Hi and thanks for your reply. I am restarting this thread up again, as I still have the same issue, and have tested a few more scenarios default vlan 1 for all infrastructure, mx64 dhcp Lan on vlan10 dhcp via windows server wireless ssid 1 , L3 roaming, access to lan and internet filtered by the normal content filter, can be overridden by group policy wireless ssid 2, Meraki DHCP, no access to lan, access to internet filtered by the normal content filter, cannot be overridden by group policy OR client whitelisting. I have tried windows laptop and android clients, same effect, it seems that the Meraki DHCP ssid which is perfect for our staff to use their personal phones, where they have no access to the LAN or each other but would like unfettered access to internet. Unfortunately the content filter is always applied. The content filter is used on the LAN and other SSID's with L3 roaming to restrict approved devices (i.e. non personal phones) yet I can apply whitelisting or group policies on various clients which can easily bypass the content filter. However, I think I found the answer Created a new VLAN with group policy attached to override the content filter Created a new staff SSID, used L3 Roaming, tagged to the VLAN and denied access to LAN seems to have fixed it. Steve
... View more
Jan 12 2018
1:35 AM
1 Kudo
To be the oldest IT guy on here, with a tidy networking cabinet!
... View more
Nov 9 2017
4:44 AM
Yes I have seen that, and despite it having the same label "Content Filtering" its is I think a different animal I have tried a few settings but not had any success bypassing the MX content filtering JUST for clients of 1 SSID Steve
... View more
Nov 9 2017
4:42 AM
I like that idea, not sure how to apply a GP to the management vlan though, all our infrastructure is on the same default vlan, the data/phone and cctv vlans are separate though
... View more
Nov 7 2017
9:33 AM
We have a strict network policy with quite a bit of filtering enabled, no personal devices within the building except the lunch room and outside on breaks Firewall - both Layer 7 rules and content filtering for social network, any file transfer, external storage systems email etc. This is suitable for our normal staff using the LAN and internal wireless networks which access the LAN, some AD group policies for overrides etc which works well. We have a staff WiFi which cannot access the LAN, but we want open access to the Internet, the staff can use any personal device such as phone, tablet or laptop and we don't want to have to use MDM I can add layer 7 rules but not override the firewall ones, and the content is still filtered even though the option to filter content is switched off on the access page of the WiFi configuration. Any ideas how I can accomplish this?
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 10491 | May 22 2018 5:15 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 37125 | |
| 1 | 11825 | |
| 1 | 10491 | |
| 1 | 1830 |
© 2025 Cisco Systems, Inc.
