Thank you for sharing this is interesting about the noise level. ... View more

Can you confirm with the other end of the 3rd party VPN, that they are building a tunnel towards the WAN1 uplink. and not WAN2? ... View more

Yeah, I was considering just making a search tool to lookup the appliance with the matching IP. ... View more

Thanks @Ryan_Miles, that got me over the hump, past my loop anyways.  I appreciate the help and prompt response.   -Greg ... View more

Ah, didn’t see this. Fair enough.  ... View more

As a standard, I tend to block all unknown DHCP servers in Switching>DHCP Servers and ARP by whitelisting the MAC of the MX (or HA MAC). ... View more

Ok I thought not. Thank you for confirming! ... View more

We had UDP listed as DNS Sec uses UDP 443. We moved the alert prio so TCP traffic is evaluated first but I dont think that will matter since they are two different streams and dont match as TCP and UDP traffic is seen differently.  We were able to use this MS article to whitelist the addresses needed and now attempting to do one off service troubleshooting.  Microsoft 365 URLs and IP address ranges - Microsoft 365 Enterprise | Microsoft Learn There is a JSON in this that we parsed with all MS service URLS   I believe that we got this to work however will be testing further towards the end of this week.  If its solved Ill make sure to give you credit! Cant thank you enough for your help thus far!    ... View more

@Azar go and look at what is actually cabled to those three ports, is it a server, another switch, a wireless access point or... ? ... View more

👏 👏 👏 MX 18.211.5 👏 👏 👏 ... View more

GUI based backup! ... View more

Well; In a VPN concentrator deployment, you only have a single WAN port connected. In a passthrough deployment, the MX acts like a simple layer 2 bridge.  It works inline.  Think of a network where you want a firewall but can't change the IP addressing.  So you might slip this in between the default gateway and the internal devices. I have never done this type of deployment.  I don't like the sound of it.   >It seems that the secondary firewall does not block any ports or interfere with the traffic in this setup.   This is expected behaviour. ... View more

I'm going to test the IPSec tag based failover, I think that is the easiest solution. Thank  your for your help! ... View more

Hi all, sorry for bringing up this old message, but I run into the same problem with C9300X model. I couldn't add/create vlan 1200 and following the documentation (Catalyst_9300-M_Series_Installation_Guide) didn't help, I always get stuck on the message > This switch is limited to 1000 vlans, Please check your vlan related configurations on all ports, and static and management vlans on the switch and network. Note vlan 1 is always open. The switch is currently allowing vlans 1,1-300,1100-1600,1-1000.    I tried multiple combinations, resets, but nothing changed, so I found the solution on the reddit , you first need to add vlans 1-300, apply it, and after that to add new set, 1100-1600 and apply it again.   If anyone else runs into the same problem, you can try with this. ... View more

I think we are all waiting for the native tunnel to be used for monitoring as well 🙂 Then things will get better ... right ? 🙂 I mean the command is kinda already there - if anyone has tried and been to impatient with waiting for the switch to reset when adding it do a network using the "cloud native" IOS-XE versions. test platform software config mode managed <- starts the conversion to "meraki mode" with the new software. But : test platform software config mode ? - tells you that there are options for "monitored" and I seem to remember the last one was called "catalyst" , Im guessing that last one is what Meraki supports sends to the switch in order to revert it back to "catalyst persona". ... View more

😲  ... View more

I understand how it is working , but not why ?    Why would we want the MX to respond to DNS requests on the WAN ? ... View more

I have done this where either an event is in just part of a building, or you want to retrict public access to reception areas etc.  Simply assign a tag to those APs and set the SSID to only be enabled on APs with tag X. ... View more

And always applied Bonjour forwarding at the MX. ... View more

While unfortunately it's not using ISE, you could create a SmartPort automation that triggers on the AP LLDP description. If it's a Catalyst 91xx it uses a Trunk port, otherwise it's an Access Port with an Access Policy. ... View more

During grad school I had an apartment located in the city centre, rather close to a street with a lot of bars adnd nighclubs. At one time, I was working on a university project where we'd measure cellular availability, and usage on a 4G LTE frequency of one of the major ISPs in Denmark.   We could clearly see an increase in unsage during during the weekend around between midnight and 2am. Around the time where all the drunk people probably were calling a cap or their ride home. 😉 ... View more

Hi! Not working  ... View more

I took the Engineering Cisco Meraki Solutions exam today after completing this week the new ECMS 4 day combined course and unfortunately still didn't pass and I've been using Meraki since 2019.   I would be interested if anyone can confirm how you get the actual score as when I completed the exam all I saw was whether you passed or failed, so I've had to gestimated from the weighting of the examination report that shows your performance in each section of the exam. ... View more

This is one of the lowest priority case between all our active cases (20-30). They will get there , but geting concrete answers has been a hard task lately. ... View more

I have always found the packet capture a bit flakey, sometimes just not showing any packets at all and then you refresh/come back 5 minutes later and it works! ... View more