Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About threeonesix
threeonesix
Here to help
Member since Dec 5, 2017
Oct 12 2021
Community Record
14
Posts
2
Kudos
0
Solutions
Badges
Aug 5 2021
7:01 PM
1 Kudo
Downgrading the firmware fixed the problem. I'll leave it as is and work with support once they respond to the request.
... View more
Aug 5 2021
6:41 PM
I don't know how to rollback the firmware. I've had a case open for 6 hours; no response yet.
... View more
Aug 5 2021
1:19 PM
Did not work. Private IP of router did not work. Nothing I have tried works.
... View more
Aug 5 2021
1:10 PM
It's not behind a NAT, it is the router connected to his cable modem. It literally IS the device creating the NAT. As I said, it is a Ubiquiti EdgeMAX router. So how would one go about trying to find this mysterious "Remote ID"? We have never used anything in the Local ID or Remote ID fields for site-to-site VPN connections to non-Meraki devices. Here is what I am seeing in the Event Log: msg: IPsec-SA expired: ESP/Tunnel GLOBAL_HQ_PUBLIC_IP[4500]->REMOTE_UBIQUITI_PUBLIC_IP[4500] spi=3329526648(0xc6748b78) msg: IPsec-SA expired: ESP/Tunnel REMOTE_UBIQUITI_PUBLIC_IP[4500]->GLOBAL_HQ_PUBLIC_IP[4500] spi=52183207(0x31c40a7)
... View more
Aug 5 2021
12:56 PM
Since that field was empty before, what should I enter there, the remote public IP address, the private IP address of the remote Ubiquiti, or ??
... View more
Aug 5 2021
12:39 PM
Our MX100 firmware was upgraded to v15.43 this morning (auto upgrade, not manual). Ever since one of our remote workers with a Ubiquiti EdgeMAX router at home can no longer get the site-to-site VPN tunnel to work. It does not employ DES so that is not the issue. Here are the settings on the Meraki for the connection: And the Ubiquiti: This VPN tunnel worked fine prior to the upgrade. So what did the upgrade break and how do I fix it? This remote worker also cannot get the Client VPN to work. If he uses his Verizon hotspot the Client VPN works. If he tries the Client VPN on his home wifi or wired network connections it fails. I did open a support ticket but thought I might get a quicker response from the Community due to the issues Meraki is experiencing today. Thank you.
... View more
Labels:
- Labels:
-
3rd Party VPN
-
Client VPN
-
Other
Jan 26 2021
6:04 PM
We have two ISP internet feeds, one in the Internet port and one in port 1. Each is served by a different ISP. On the Internet port we have been assigned (not real public IP's, obviously) 192.168.0.0/29. This provides 5 useable public IP addresses. I need 8 public IP addresses. The ISP wants to assign me another block of 5 addresses, 192.168.10.0/29. This will not work on either of our WAN ports, correct? They can only belong to a single subnet? If this is correct, why? I'm just thinking about a Windows computer ... you can assign a single ethernet port to multiple subnets in Windows. Seems like a no-brainer for a router. Is there any way around this issue other than my ISP assigning me a completely new /28 block of addresses?
... View more
Feb 13 2018
3:07 PM
1 Kudo
I really wanted to accept that as the solution but I'm afraid future humans will think we are lazy. lol
... View more
Feb 13 2018
3:04 PM
Pretty sure we already do employ syslog with this MX100 so I'll look into that.
An even better option might be to go on about my life and wait until our salespeople and supply chain employees complain that they're not receiving emails they are expecting 🙂
... View more
Feb 13 2018
2:51 PM
I don't think so because the firewall rule takes precedence. The NAT publishing rule associates the inbound SMTP traffic with our Barracuda Email Security Gateway appliance, which then forwards accepted emails to our Exchange server. If the MX100 blocks an inbound SMTP connection attempt from 1.2.3.4 the Barracuda isn't going to show that traffic at all. So I think the monitoring has to be done at the firewall where the rule is in place to block SMTP traffic that does not emanate from Barracuda's public IP ranges. Is my thinking incorrect? Very well could be.
... View more
Feb 13 2018
2:40 PM
I think I entered "Monitoring Inbound SMTP" or something like that. That would be more appropriate as I'm not using Nagios 😉 Thanks!
... View more
Feb 13 2018
2:38 PM
I have no idea why the Subject of this post reads "Monitoring MR's with Nagios" as that is NOT what I entered. Weird.
... View more
Feb 13 2018
2:37 PM
I recently started employing the Barracuda Cloud Protection Layer to filter inbound email. I've waited now 7 days since changing our public MX records. Mail is flowing fine, there's no problem with that. Today I changed our MX100 firewall NAT rule such that SMTP port 25/587 traffic is now only being accepted from Barracuda's IP ranges. Mail is still flowing fine. What I would like to do now, however, is monitor inbound port 25 traffic, to see if any legit mail from our customers or vendors is being blocked. I know that changing public MX records can take sometimes crazy amounts of time to propagate based on doing this at a former employer. Believe it or not back then (6 years ago) I was still seeing legit SMTP traffic coming in from customers and vendors a full month after having made the public DNS change. I'd like to avoid the possibility of losing revenue due to anti-spam policies. How can I monitor this inbound SMTP traffic via the Meraki Dashboard? Also is there any way to see past SMTP inbound traffic, via report or some other mechanism? TIA
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 2837 | |
| 1 | 7803 |
© 2024 Cisco Systems, Inc.
