Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About CarlosCoque
CarlosCoque
Here to help
Member since Nov 23, 2017
Oct 16 2024
Community Record
28
Posts
1
Kudos
0
Solutions
Badges
Apr 18 2023
2:45 PM
Hi @DAlleman, thanks for the article. I've read that and apparently, the only way to partially do that is to configure a NAT 1:1, which is not exactly what I'm looking for because I don't have a specific LAN IP address I'd like to use. Do you think there is another way to achieve that requirement? (below) Do you think there is anything I can do to achieve this?
... View more
Apr 18 2023
1:23 PM
Hello, We use an MX-64 Security Gateway as our internet gateway at the office. We're planning to run a vulnerability scanner from outside and they gave us 2 IP addresses to be added, so tests won't be blocked by any security feature at the firewall level. I've been researching a way of doing that in our Meraki firewall, but haven't found it yet. We have another firewall from SonicWall and we did that in the IPS feature. Thanks, Carlos
... View more
Oct 11 2022
1:14 PM
Tried that as well. Mine was showing "never" since the beginning if I'm not wrong.
... View more
Oct 6 2022
12:55 PM
Unfortunately not. I expected that this was a common issue but apparently not many people have that. We have Meraki and another brand firewall behind the same internet link and that happens with both in slightly different manners. I also asked my ISP if that could be coming from them, but they denied it. To be honest, I lost my hope already and I'm trying to live with that.
... View more
Jul 19 2022
6:59 AM
It has a public IP, however, the issue is happening with a SonicWall firewall behind the same modem and with a different public IP address. That's why I believe the MX is not the issue. We also use Meraki switches all over our network. Do you think it could be something with those switches? Like, maybe an MX security policy applied to the switches to protect the LAN?
... View more
Jul 18 2022
2:36 PM
Hi @PhilipDAth, thanks again for another suggestion. No luck again... It still stops the transfer at the same point. I also tried with the other firewall we have (non-Meraki) and had a similar issue. That's the reason after some troubleshooting I believe it could be something not directly related to Meraki. Since transfer speeds are around 1MB/s (very slow) I believe that it could be something related to a timeout. It could also be a download file buffer or something similar that could be getting full. I'm really intrigued with this issue...
... View more
Jul 18 2022
12:46 PM
No luck. I noticed that it usually happens at the same point of the file transfer (28% for some files, 47% for others). What seems to be happening is that after some amount of data is transferred (or transfer time), the network adapter on the remote host where the client VPN is running simply stops working making the internet connection drop, and then it drops the VPN connection as well. That's why I believe it's an issue with the remote client and not the MX. After some time it gets back online. I tried virtually everything already and it simply keeps happening with multiple laptops (not sure if all because most people don't transfer large files through the VPN link). Here is a list of what I remember having tried: - Uninstalling all security software - Disabling Windows firewall - Restarting internet modem - Using a VPN from another firewall connected to the same modem as our main firewall - Changing network profile (Public vs Private) - Changing file type (exe vs dummy file) - Changing MTU - Changing from Wireless to Wired - Copying using shared drives, RDP (copy from RDP and paste locally), RDP local drive configuration, and robocopy/ - Disabling "Allow the computer to turn off this device to save power" on the network adapter and a few more... Did anyone have anything similar?
... View more
Jul 14 2022
2:40 PM
Hi everyone, I'm having a very particular issue. I have 2 firewalls connected to the same modem: a Meraki MX64 and another from a different brand. About a month ago, some users complained that they could not complete the download of a 1.4GB file from one of our servers. I haven't imagined that it could be a broader issue, so I asked them to restart their computers and try again. Over time they'd eventually be able to download that file and stop reporting that issue. A couple of days ago however I got that same issue with another user and decided to further investigate. She wasn't able to download the file and would get an error after about 5 to 7 minutes of downloading the file, according to her. I tried downloading the same file from my laptop and it did work fine. On the following day though, when I was trying to develop a robocopy batch to help her out with the download process, the same issue started happening to me over and over. I tried uninstalling all the security software on my laptop and it'd still drop the VPN connection during the file download. I tried downloading other large files and would get interrupted in the same percentages for each file. Then, I decided to try connecting to the VPN of the other firewall that is connected to the same LAN as the MX64. Surprisingly, I got a similar issue. I also tried checking the MX64 logs and Windows Application logs, but haven't found any clue. Today I did some additional testing and tried downloading a 600Mb file 3 times. All of them have failed at the same point (28% transferred, then the speed goes to 0, and a couple of minutes after the VPN connection to MX64 drops). I suspect it can be something with Windows VPN configuration but I have to confess I'm pretty lost at the moment. Did anyone had a similar issue before? Thanks!
... View more
May 25 2022
1:55 PM
We're ongoing with our quest to improve security on our Meraki VPN access. Based on the opinions on this thread, I ended up agreeing that we need a 3rd party solution in order to have 2FA for the VPN access. The next step in our internal discussion would be to restrict the VPN connections based on the MAC address of the laptops the company provides the employees. I was researching about that, but haven't found anything yet. Does anyone know if that is possible?
... View more
May 2 2022
10:59 AM
That makes sense. Which solution do you use for that? Are you happy with the outcomes?
... View more
May 2 2022
7:55 AM
Hi Everyone, We currently use Meraki VPN to allow remote users to access the company's internal network. Our VPN users are created directly in Meraki, which means there is no interconnection with MS Active Directory in regards to that. They basically click on the VPN connection, enter their username and password from Meraki, and proceed with the connection. Some users automated that process using a batch file with RASDIAL command and their credentials. Once connected, users can access the company's shared drives normally. We're trying to improve security and wanted to add MFA to that access, so users would need to use an OTP as well. I've been researching on the internet and found only 3rd party paid solutions for that. I was wondering if anyone was able to use MFA to Meraki's VPN at no extra cost. That way, users would use a phone app like Google Authenticator to get the OTP code and do the login process with that. Thanks, Carlos
... View more
Mar 23 2022
1:20 PM
They don't use the same ISP because there are people in other countries and they have the same issues.
... View more
Mar 23 2022
1:11 PM
We have 34 users in total and at this time 9 are connected. During a regular day, though, we have about 20 to 25 concurrent users. We've been using this for almost 4 years now and never had an issue like that.
... View more
Mar 23 2022
12:37 PM
Here is what I see on Meraki dashboard: Yesterday Switch was showing as Up-to-date and Wireless and Security appliance had updates. I updated those but haven't restarted the Security appliance myself because I suppose that the upgrade process does that already. Now, it seems there is an update for the switches, that I'm planning to do at night. Not all VPN clients drop at the same time, but I noticed sometimes that some people drop at the same time as me, because they message me. Then, I message some other people and they confirm they're still online. It's a weird issue and I'm not sure what else to look for
... View more
Mar 23 2022
12:29 PM
We have about 35 users in that firewall and probably 25 connected during the day. The issue seems to affect all users the same way. We have about 5 people working remotely from other countries and they have the same issues as our remote users working from our location.
... View more
Mar 23 2022
11:59 AM
Hi everyone, Yesterday morning I started to have an issue with Meraki VPN that would keep dropping our users from the VPN very frequently during the day. Today morning, I kept receiving the same complaints so far. I called my ISP and asked them if there could be anything going on with our modem, but after checking that from their end they confirmed that everything was fine with the modem. We also have another firewall from a different brand connected to the same modem and that VPN is not dropping at all. Yesterday, after the issue started to happen, I updated MX64 to the latest firmware version, but it hasn't made any change. I opened a case with Meraki support but they are focusing as if the issue is with our workstations asking if we updated the computers recently. From my perspective, everything points out to the MX64 being the cause of the issue. What I noticed checking Meraki's event log this morning was that I started to have a lot of "Events dropped" logs entries yesterday and today. I checked in the event log for prior occurrences of those messages and had just a couple of those in the last 4 years or so. That way I believe those can be related to the issue I'm having. Right now, I'm still trying to get some useful help from Meraki but decided to check if anyone in this group could help me as well. Did anyone have any issue with that before? Thanks, Carlos UPDATE: What ended up working for us so far (it's been almost 1.5 days with no reported VPN disconnection) was to shut down our internet modem then the Meraki MX64, disconnect the cables, spray some compressed air in the connection inputs on both pieces of equipment, then turn everything on. After that, we haven't seen any "Events dropped" entries in the logs and no complaints about VPN drops anymore.
... View more
Feb 8 2021
8:43 AM
It's a pretty simple setup. LAN is 192.168.0.0/24 and the Web Server is there. I can access the Web Server from both itself and from any host in the LAN, as expected. I have 2 WAN ports, one is the original from the MX-64 and the other is one of the LAN ports converted into WAN2. Then, I configured a Port Forwarding from the WAN ports (I used the setting "both", but tried with "Internet 1" as well in the testing process) to the Web server in the LAN. Everything seems to be properly set, but it simply doesn't work.
... View more
Feb 3 2021
1:55 PM
Here are my latest tests. From the LAN: From outside: Surprisingly for me they are different. From the LAN I didn't get anything while from outside I got something. It still times out on both, though.
... View more
Feb 3 2021
9:53 AM
I did that from the Meraki cloud access and I was using that on a LAN computer but I believe there wouldn't have any difference if I accessed that from outside as well.
... View more
Feb 3 2021
9:20 AM
Well observed. I believe I did that to test something but got back to TCP and also disabled the firewall on the internal server, just in case. I still get the same timeout screen. I can access both from the localhost and from any computer in our LAN, but it still times out when coming from outside. I don't know what else I can try at this point...
... View more
Feb 2 2021
2:04 PM
Hi CptnCrnch, I read that link you sent me when I was starting the configuration. The Port Forwarding should be a pretty simple setup. Then, for troubleshooting purposes, I decided to use the IIS Default Website. IP address is 192.168.0.30 and the website listens to port 8080. I can access that by IP address from both the localhost and any host on the LAN. Then, I set the firewall rule accordingly and allowed any remote IP access. Below it's the packet capture when I tried accessing from outside: --- Start Of Stream --- reading from file -, link-type EN10MB (Ethernet) 21:00:38.873811 IP [My_Home_IP].49556 > [Static_IP].8080: Flags [S], seq 4169732469, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 21:00:38.875411 IP [My_Home_IP].49557 > [Static_IP].8080: Flags [S], seq 1638634888, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 21:00:42.934329 IP [Static_IP].4500 > [My_Home_IP].4500: isakmp-nat-keep-alive 21:00:46.884274 IP [My_Home_IP].49556 > [Static_IP].8080: Flags [S], seq 4169732469, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 21:00:46.886153 IP [My_Home_IP].49557 > [Static_IP].8080: Flags [S], seq 1638634888, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 21:00:53.968322 IP [My_Home_IP].49560 > [Static_IP].8080: Flags [S], seq 987829868, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 21:00:53.968372 IP [My_Home_IP].49561 > [Static_IP].8080: Flags [S], seq 26056157, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 --- End Of Stream --- It still times out and opens nothing inside the browser. That's insane...
... View more
Feb 1 2021
11:46 AM
Hi Bruce, Thanks for the quick reply. When I'm on the LAN, I can normally access the server by name and it opens the expected website. When I access that using the internal IP address though. I get "HTTP Error 404. The requested resource is not found." but I believe it's expected and it also means I'm reaching the server. However, when I'm from outside the LAN and try to access with the ports configured in the firewall rule using the external IP address, it times out. It seems it simply doesn't work because I believe the configuration is correct... It's worth to mention that the external IP addresses I'm binding to this server are the same I have bound to the WAN interfaces in the security appliance. I found I wouldn't be able to use them for this purpose if I was using NAT 1:1 but it should work when I'm using Port Forwarding instead.
... View more
Jan 26 2021
6:43 AM
Hi everyone, I had a posted marked as SPAM, not really sure why. I already clicked on the link "abuse report" but haven't gotten any reply and the post is still invisible. Is there anything I can do to make it roll? Thanks!
... View more
Jan 25 2021
12:50 PM
Hi, My name is Carlos and I live in Winnipeg, Canada. We use all kinds of Meraki solutions on the company I work for and it'll be nice to share my knowledge with this community. Cheers, Carlos
... View more
© 2024 Cisco Systems, Inc.
