Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About C3SGInc
C3SGInc
Getting noticed
Member since Dec 5, 2017
Oct 12 2023
Community Record
25
Posts
2
Kudos
0
Solutions
Badges
May 9 2023
9:00 AM
In case someone else runs into this, here is the best practice on isolating a VLAN. Creating a DMZ with the MX Security Appliance - Cisco Meraki
... View more
Dec 14 2022
12:33 PM
Did you run into any issues when adding the SP-Initiated part of the configuration? I keep getting a message after login that my application identifier was not found in the directory.
... View more
Dec 14 2022
12:28 PM
Has anyone been able to get the SP-Initiated SAML SSO to work? I can get the test to work and then went through the guide to add SP-Initiated. I go to the url for my subdomain and select SSO and get directed to my AAD login, complete the login but then get an error that my application identifier was not found in the directory. Any ideas?
... View more
Dec 1 2022
9:45 AM
1 Kudo
Just an update as support seems to be using this tech note as the way to fix things. We updated the firmware on our vMX100 this morning and it fried it. When following the process above we ran into several issues. In step 2/2 when we tried to stop the VM it was throwing a message about deny assignments. I finally just skipped this step. In step 2/5, in order to delete the app you have to select the link for the app and then you will get a delete icon. I would also suggest that you capture the config screen for your VM prior to going through this process so that you can remember some of the configuration items when you recreate the VM. I hope this helps. Many thanks to James-VetaTek for the write up.
... View more
Feb 3 2021
6:58 AM
Have you found any patch cables that are SC female to LC male? In the grand scheme of things, that is the hang-up. The original install is not using a patch panel, so the incoming SC fiber connection is male.
... View more
Anyone out there migrate from an older Cisco solution to Meraki and have to change from SC to LC connectors? I have a customer with Cisco 3950 and various other Cisco switches using a Cisco WS-G5484 fiber connect and are planning to move to an all Meraki solution which will use LC connectors on the GBICs. Curious how people have done this in the past. I have a wiring vendor that has suggested an SC coupler to an SC/LC fiber patch cable, but seems a bit hokey to me. Anyone out there deal with this and/or have a good solution? Thanks
... View more
Nov 17 2020
5:28 AM
Interesting that you mentioned "all untagged". Are you set to use VLANs but only have the default or are you set to not use VLANs? Almost every time I have seen the issue you describe it is because the data is getting double tagged. In this case, if you set the SSID to tag the default VLAN and the switch port was untagged on the same VLAN the you would be double tagging and the DHCP server would never see the DHCP request on a valid VLAN. If you are setting a VLAN in the SSID, try turning that off and see if you start picking up DHCP addresses on your clients.
... View more
Feb 20 2020
11:52 AM
From the results you posted it appears that your packet jump directly to the Internet after hitting your default gateway. Assuming that you had the VPN connection up when you ran the traceroute, I would say that your VPN connection/client does not know about the subnet that you are trying to reach. I would expect to see all private IP's in route to the AWS app that you mentioned. I would start with validating the VPN connection properties.
... View more
Feb 20 2020
7:34 AM
Not certain if you are still trying to do this, but there are several conversations where people have used Flow to receive the webhook and then format the data and send it into Teams. Still somewhat convoluted, but at least not going to a third party app outside of the MS environment.
... View more
Feb 20 2020
7:16 AM
Have you ran a tracert after the user connects to the VPN? Is it actually seeing the correct route through the VPN? You might test disabling AMP and reconnect to see what happens. We've seen that do strange things, although, once your tunnel is up it shouldn't be able to mess with that traffic.
... View more
Feb 20 2020
7:04 AM
Can you describe your physical environment and user environment? Do you have users moving around allot? Are the disassociation issues with user byod devices or end-user devices. Any chance your signals are overlapping too much and causing your devices to hop between AP's? You might also upload a segment of the messages so we can help look for patterns/issues.
... View more
Feb 20 2020
6:38 AM
I don't see why it wouldn't. You can add a non-meraki VPN peer to the vMX, define the remote subnets and the routing should take care of itself. I believe you could also setup OSPF to assist, but not certain how that works with non-meraki VPN's. FYI, for us, the vMX solution has been very solid. Haven't done much with it as it pretty much manages itself. With 30+ endpoints and growing on our VPN, it makes adding locations transparent.
... View more
Mar 14 2019
5:26 AM
I would agree that would be an option. In this case is was not identified as a need. The ISP and bandwidth that they have is not what I would consider worthy of hosting anything, so a policy was put it place that any tenants that required inbound access beyond VPN would need to obtain that service on their own.
... View more
Oct 17 2018
1:18 PM
Thanks for the quick reply and the detailed information, very, very helpful. Are you on a pay as you go plan or an EA agreement? Thanks again, I have reached out to every internal Meraki person I know and none have been able to shed any light on the subject.
... View more
Oct 17 2018
11:18 AM
Working with a client that currently has some servers running in Azure. We currently have a site to site VPN set up and working, but it is only between the main office and Azure, the remote locations cannot reach it. They are wanting to change that by installing the vMX100 in their Azure instance. While it is easy to understand the Meraki licensing cost for the vMX, we have no idea what to expect the Azure costs to be. So, I am curious if anyone that has this set up can tell me what the licensing model is that they are using and what it is costing them monthly? Of course this will ultimately depend on how much traffic is going through it, so if you can estimate that or describe how you are using it, it will really help us to understand the long terms costs. Thanks
... View more
Labels:
- Labels:
-
Azure
Feb 26 2018
6:48 AM
The environment is such that there are shared resources like conference rooms, copy rooms, training room and etc. So they need to be able to move about. One thought that I had was to use logons with group policy, but for some strange reason, Meraki does not support assigning GP to Meraki authenticated users.
... View more
Feb 26 2018
5:27 AM
Yes, but potentially too many tenants for the number of SSID's.
... View more
Feb 23 2018
5:07 AM
Adam, That is the same process I was thinking on the wired side. Do you also have wireless? If so, how are you overlaying that? Thanks
... View more
Feb 22 2018
2:15 PM
Haha, That would be a deal! Thanks for your help.
... View more
Feb 22 2018
2:11 PM
Okay, that is close to where I was thinking about going. But, I felt that I would create a user account for each tenant as assign the GP based on logon. That way they can get connected per tenant without management intervention. Maybe use VLANs on switch ports then assign VLAN per GP on the wireless. Again, trying to keep hassle down for both the end users and the managers.
... View more
Feb 22 2018
2:05 PM
That would then require that every tine they brought in a new device, we would have to locate it and assign it to their specific GP?
... View more
Feb 22 2018
1:58 PM
Can't really completely isolate then as it is not necessarily one tenant to one port. Also, it appears there are some limitations to which ports and crossing stack boundaries. Thanks for the idea though. Never really considered that one.
... View more
Feb 22 2018
1:53 PM
With this solution they would need to create either individual user accounts or at least one account per tenant, correct?
... View more
Feb 22 2018
1:24 PM
1 Kudo
Looking for suggestions. I have a client that has a multi-tenant building. They have Meraki everything, switches, access points and firewall. They want to be able to isolate traffic between tenants for both wired and wireless with the least amount of intervention possible. Note that there are too many individual clients to give each a separate SSID, Ideas? Thanks
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 2119 | |
| 1 | 16486 |
© 2024 Cisco Systems, Inc.
