Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About CarlosCoque
CarlosCoque
Here to help
Member since Nov 23, 2017
11-15-2022
Community Record
26
Posts
1
Kudos
0
Solutions
Badges
10-11-2022
01:14 PM
Tried that as well. Mine was showing "never" since the beginning if I'm not wrong.
... View more
10-06-2022
12:55 PM
Unfortunately not. I expected that this was a common issue but apparently not many people have that. We have Meraki and another brand firewall behind the same internet link and that happens with both in slightly different manners. I also asked my ISP if that could be coming from them, but they denied it. To be honest, I lost my hope already and I'm trying to live with that.
... View more
07-19-2022
06:59 AM
It has a public IP, however, the issue is happening with a SonicWall firewall behind the same modem and with a different public IP address. That's why I believe the MX is not the issue. We also use Meraki switches all over our network. Do you think it could be something with those switches? Like, maybe an MX security policy applied to the switches to protect the LAN?
... View more
07-18-2022
02:36 PM
Hi @PhilipDAth, thanks again for another suggestion. No luck again... It still stops the transfer at the same point. I also tried with the other firewall we have (non-Meraki) and had a similar issue. That's the reason after some troubleshooting I believe it could be something not directly related to Meraki. Since transfer speeds are around 1MB/s (very slow) I believe that it could be something related to a timeout. It could also be a download file buffer or something similar that could be getting full. I'm really intrigued with this issue...
... View more
07-18-2022
12:46 PM
No luck. I noticed that it usually happens at the same point of the file transfer (28% for some files, 47% for others). What seems to be happening is that after some amount of data is transferred (or transfer time), the network adapter on the remote host where the client VPN is running simply stops working making the internet connection drop, and then it drops the VPN connection as well. That's why I believe it's an issue with the remote client and not the MX. After some time it gets back online. I tried virtually everything already and it simply keeps happening with multiple laptops (not sure if all because most people don't transfer large files through the VPN link). Here is a list of what I remember having tried: - Uninstalling all security software - Disabling Windows firewall - Restarting internet modem - Using a VPN from another firewall connected to the same modem as our main firewall - Changing network profile (Public vs Private) - Changing file type (exe vs dummy file) - Changing MTU - Changing from Wireless to Wired - Copying using shared drives, RDP (copy from RDP and paste locally), RDP local drive configuration, and robocopy/ - Disabling "Allow the computer to turn off this device to save power" on the network adapter and a few more... Did anyone have anything similar?
... View more
07-14-2022
02:40 PM
Hi everyone, I'm having a very particular issue. I have 2 firewalls connected to the same modem: a Meraki MX64 and another from a different brand. About a month ago, some users complained that they could not complete the download of a 1.4GB file from one of our servers. I haven't imagined that it could be a broader issue, so I asked them to restart their computers and try again. Over time they'd eventually be able to download that file and stop reporting that issue. A couple of days ago however I got that same issue with another user and decided to further investigate. She wasn't able to download the file and would get an error after about 5 to 7 minutes of downloading the file, according to her. I tried downloading the same file from my laptop and it did work fine. On the following day though, when I was trying to develop a robocopy batch to help her out with the download process, the same issue started happening to me over and over. I tried uninstalling all the security software on my laptop and it'd still drop the VPN connection during the file download. I tried downloading other large files and would get interrupted in the same percentages for each file. Then, I decided to try connecting to the VPN of the other firewall that is connected to the same LAN as the MX64. Surprisingly, I got a similar issue. I also tried checking the MX64 logs and Windows Application logs, but haven't found any clue. Today I did some additional testing and tried downloading a 600Mb file 3 times. All of them have failed at the same point (28% transferred, then the speed goes to 0, and a couple of minutes after the VPN connection to MX64 drops). I suspect it can be something with Windows VPN configuration but I have to confess I'm pretty lost at the moment. Did anyone had a similar issue before? Thanks!
... View more
05-25-2022
01:55 PM
We're ongoing with our quest to improve security on our Meraki VPN access. Based on the opinions on this thread, I ended up agreeing that we need a 3rd party solution in order to have 2FA for the VPN access. The next step in our internal discussion would be to restrict the VPN connections based on the MAC address of the laptops the company provides the employees. I was researching about that, but haven't found anything yet. Does anyone know if that is possible?
... View more
05-02-2022
10:59 AM
That makes sense. Which solution do you use for that? Are you happy with the outcomes?
... View more
05-02-2022
07:55 AM
Hi Everyone, We currently use Meraki VPN to allow remote users to access the company's internal network. Our VPN users are created directly in Meraki, which means there is no interconnection with MS Active Directory in regards to that. They basically click on the VPN connection, enter their username and password from Meraki, and proceed with the connection. Some users automated that process using a batch file with RASDIAL command and their credentials. Once connected, users can access the company's shared drives normally. We're trying to improve security and wanted to add MFA to that access, so users would need to use an OTP as well. I've been researching on the internet and found only 3rd party paid solutions for that. I was wondering if anyone was able to use MFA to Meraki's VPN at no extra cost. That way, users would use a phone app like Google Authenticator to get the OTP code and do the login process with that. Thanks, Carlos
... View more
03-23-2022
01:20 PM
They don't use the same ISP because there are people in other countries and they have the same issues.
... View more
03-23-2022
01:11 PM
We have 34 users in total and at this time 9 are connected. During a regular day, though, we have about 20 to 25 concurrent users. We've been using this for almost 4 years now and never had an issue like that.
... View more
03-23-2022
12:37 PM
Here is what I see on Meraki dashboard: Yesterday Switch was showing as Up-to-date and Wireless and Security appliance had updates. I updated those but haven't restarted the Security appliance myself because I suppose that the upgrade process does that already. Now, it seems there is an update for the switches, that I'm planning to do at night. Not all VPN clients drop at the same time, but I noticed sometimes that some people drop at the same time as me, because they message me. Then, I message some other people and they confirm they're still online. It's a weird issue and I'm not sure what else to look for
... View more
03-23-2022
12:29 PM
We have about 35 users in that firewall and probably 25 connected during the day. The issue seems to affect all users the same way. We have about 5 people working remotely from other countries and they have the same issues as our remote users working from our location.
... View more
03-23-2022
11:59 AM
Hi everyone, Yesterday morning I started to have an issue with Meraki VPN that would keep dropping our users from the VPN very frequently during the day. Today morning, I kept receiving the same complaints so far. I called my ISP and asked them if there could be anything going on with our modem, but after checking that from their end they confirmed that everything was fine with the modem. We also have another firewall from a different brand connected to the same modem and that VPN is not dropping at all. Yesterday, after the issue started to happen, I updated MX64 to the latest firmware version, but it hasn't made any change. I opened a case with Meraki support but they are focusing as if the issue is with our workstations asking if we updated the computers recently. From my perspective, everything points out to the MX64 being the cause of the issue. What I noticed checking Meraki's event log this morning was that I started to have a lot of "Events dropped" logs entries yesterday and today. I checked in the event log for prior occurrences of those messages and had just a couple of those in the last 4 years or so. That way I believe those can be related to the issue I'm having. Right now, I'm still trying to get some useful help from Meraki but decided to check if anyone in this group could help me as well. Did anyone have any issue with that before? Thanks, Carlos UPDATE: What ended up working for us so far (it's been almost 1.5 days with no reported VPN disconnection) was to shut down our internet modem then the Meraki MX64, disconnect the cables, spray some compressed air in the connection inputs on both pieces of equipment, then turn everything on. After that, we haven't seen any "Events dropped" entries in the logs and no complaints about VPN drops anymore.
... View more
02-08-2021
08:43 AM
It's a pretty simple setup. LAN is 192.168.0.0/24 and the Web Server is there. I can access the Web Server from both itself and from any host in the LAN, as expected. I have 2 WAN ports, one is the original from the MX-64 and the other is one of the LAN ports converted into WAN2. Then, I configured a Port Forwarding from the WAN ports (I used the setting "both", but tried with "Internet 1" as well in the testing process) to the Web server in the LAN. Everything seems to be properly set, but it simply doesn't work.
... View more
02-03-2021
01:55 PM
Here are my latest tests. From the LAN: From outside: Surprisingly for me they are different. From the LAN I didn't get anything while from outside I got something. It still times out on both, though.
... View more
02-03-2021
09:53 AM
I did that from the Meraki cloud access and I was using that on a LAN computer but I believe there wouldn't have any difference if I accessed that from outside as well.
... View more
02-03-2021
09:20 AM
Well observed. I believe I did that to test something but got back to TCP and also disabled the firewall on the internal server, just in case. I still get the same timeout screen. I can access both from the localhost and from any computer in our LAN, but it still times out when coming from outside. I don't know what else I can try at this point...
... View more
02-02-2021
02:04 PM
Hi CptnCrnch, I read that link you sent me when I was starting the configuration. The Port Forwarding should be a pretty simple setup. Then, for troubleshooting purposes, I decided to use the IIS Default Website. IP address is 192.168.0.30 and the website listens to port 8080. I can access that by IP address from both the localhost and any host on the LAN. Then, I set the firewall rule accordingly and allowed any remote IP access. Below it's the packet capture when I tried accessing from outside: --- Start Of Stream --- reading from file -, link-type EN10MB (Ethernet) 21:00:38.873811 IP [My_Home_IP].49556 > [Static_IP].8080: Flags [S], seq 4169732469, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 21:00:38.875411 IP [My_Home_IP].49557 > [Static_IP].8080: Flags [S], seq 1638634888, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 21:00:42.934329 IP [Static_IP].4500 > [My_Home_IP].4500: isakmp-nat-keep-alive 21:00:46.884274 IP [My_Home_IP].49556 > [Static_IP].8080: Flags [S], seq 4169732469, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 21:00:46.886153 IP [My_Home_IP].49557 > [Static_IP].8080: Flags [S], seq 1638634888, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 21:00:53.968322 IP [My_Home_IP].49560 > [Static_IP].8080: Flags [S], seq 987829868, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 21:00:53.968372 IP [My_Home_IP].49561 > [Static_IP].8080: Flags [S], seq 26056157, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 --- End Of Stream --- It still times out and opens nothing inside the browser. That's insane...
... View more
02-01-2021
11:46 AM
Hi Bruce, Thanks for the quick reply. When I'm on the LAN, I can normally access the server by name and it opens the expected website. When I access that using the internal IP address though. I get " HTTP Error 404. The requested resource is not found. " but I believe it's expected and it also means I'm reaching the server. However, when I'm from outside the LAN and try to access with the ports configured in the firewall rule using the external IP address, it times out. It seems it simply doesn't work because I believe the configuration is correct... It's worth to mention that the external IP addresses I'm binding to this server are the same I have bound to the WAN interfaces in the security appliance. I found I wouldn't be able to use them for this purpose if I was using NAT 1:1 but it should work when I'm using Port Forwarding instead.
... View more
01-26-2021
06:43 AM
Hi everyone, I had a posted marked as SPAM, not really sure why. I already clicked on the link "abuse report" but haven't gotten any reply and the post is still invisible. Is there anything I can do to make it roll? Thanks!
... View more
01-25-2021
12:50 PM
Hi, My name is Carlos and I live in Winnipeg, Canada. We use all kinds of Meraki solutions on the company I work for and it'll be nice to share my knowledge with this community. Cheers, Carlos
... View more
01-25-2021
12:08 PM
Hi, We have a MX-64 with 2 internet links, each one having an external static IP address. We're currently doing a project where we need to make a web server on our LAN available to the internet. I was reading about that and found that I couldn't do NAT 1:1 because we just have the 2 static IP's on the MX-64 WAN interfaces and Meraki won't allow those to be used in that case. Then, I decided to go with the port forwarding option, which seemed to be fairly simple. My configuration is shown below: After configuring it I've just saved it and started testing. The web server (192.168.0.130) can be normally accessed within our LAN, but when I try http://[static_IP]:8080 or https://[static_IP]:8443 with any of the 2 IP's on our WAN interfaces it times out and doesn't open anything. Any clues on what I'm doing wrong? Thanks, Carlos
... View more
11-24-2017
01:20 PM
Hi WANKiller, I had to connect the MX-64 on a modem using NAT for testing purposes. I was initially getting error 809, then I opened the ports suggested in the Meraki troubleshooting documentation and now I'm getting error 789.
... View more
