Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About bxdobs
bxdobs
Here to help
Member since Dec 5, 2017
03-29-2022
Community Record
7
Posts
1
Kudos
1
Solution
Badges
03-29-2022
08:12 PM
Just updated 2 locations with 1Gb up/dn Fibre Internet. One location has a Meraki Z1 the other has a Z3 ... the Z series specs suggest they are Gb Wan/Lan devices but confused with the Z1 Stateful Firewall spec as 50Mb and Z3 as 100Mb. Doesn't this mean the Z1 is restricted to 50Mb and the Z3 is restricted to 100Mb? Am I misunderstanding this spec? Should I be looking to replace these devices on the upgraded 1G Internet connections?
... View more
01-23-2022
02:37 AM
Thanks I will reboot all network devices when I go to site next week and see if that resolves the issue
... View more
01-23-2022
02:23 AM
ok so I have applied a group policy with Layer 3 of deny 192.0.0.0/8 and Layer 7 deny p2p ... YET ... I can still ping any of the 192.168.210.0 or 192.168.209.0 devices ... am I doing something wrong or am I misunderstanding the guest example given by: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying_Group_Policies
... View more
01-23-2022
12:26 AM
Z1 set with 192.168.210.0/24 for the LAN and 192.168.209.0/24 for the VPN All Permanent clients have been assigned Static IPs to allow remote port forwarding and remote support. Trying to isolate one PC on the INTRANET (LAN CLIENT) from seeing or interacting with any of the other Devices inside the 192.168.209-210 INTRANET Currently using an AC1200 WiFi Router (Model R6120) with a static IP on the WAN (192.168.210.65) ... the PC plugged into the Netgear LAN basically has its own domain of 192.168.1.0-254 ... BUT ... it can still connect to any of the upstream IP's in the 209-210 network ... is there some way to restrict this IP access to the 209-210 network? I tried to put the AC1200 in front of the Z1 and use the AC1200's DMZ feature but the Z1 features specifically the VPN failed to work in this configuration ... AC1200 by default, has VPN pass-thru enabled ... the Z1 VPN failed with DMZ on AND off.
... View more
07-03-2020
07:00 PM
1 Kudo
Please Disregard my previous posting ... tried another machine which had exactly the same results with W10 Pro 64b Turns out in this case the 691 error was CORRECT ... there may be an issue with the Meraki Dashboard used from the latest Firefox browser ... I explicitly CHANGED the PW for the VPN User to something simple as a temporary test ... this temporary password apparently wasn't accepted by the dashboard ... don't recollect seeing any error message when I pressed the change button so will take a closer look at this as a possible issue Anyway I have now put back the original PW and reset all users ... all working now
... View more
07-03-2020
04:37 PM
Not certain what is going on with my attempts to connect to a Meraki Z device using VPN Client in WX Home (brand new out of the Box HP Laptop): 2 Laptops side by side (same local network and appliances); L1=W7 Home Premium L2=WX Home L1 connects to the Meraki Z VPN with no issues Disconnect L1 and attempt to connect L2 with IDENTICAL credentials but the connection is denied L2 reports the following VPN error Can't connect to <name of VPN> VPN The remote connection was denied because the user name and password combination you provided is not recognized, or the selected authentication protocol is not permitted on the remote access server The L2 application events log shows a 691 error also suggesting the credentials don't match The MZ log indicates the following common negotiation messages - received broken Microsoft ID: MS NT5 ISAKMPOAKLEY - invalid DH group 20. - invalid DH group 19. while L1 connects with the following negotiation message - VPN client connected <local ip> both display the following negotiation messages - ISAKMP-SA established <MZ ip address> - IPsec-SA established: ESP/Transport <connection details> - IPsec-SA established: ESP/Transport <more connection details> L2 does not connect and has a number of additional negotiation errors - purged IPsec-SA proto_id=ESP - ISAKMP-SA expired <MZ ip address> - ISAKMP-SA deleted <MZ ip address> - no configuration found for <local internet ip address> - failed to begin ipsec sa negotiation. I have followed the: - Meraki troubleshooting guide - Meraki W10 VPN Client instructions Being I can connect via another machine with the same credentials with the only notable difference being the W10 Home 64b OS (All updates have been applied), I can only assume there is some issue within the W10 machine All the 'Solutions' found on the net or in this forum thus far have NOT produced a solution
... View more
12-05-2017
11:03 AM
VPN Client software like Big-IP Edge Client VPN have settings that allow both Local and VPN network traffic ... recently noticed that while connected to a Meraki Z1 VPN, my Local network traffic appears to be cut off (my local Gateway Router is inaccessible while connected to the Z1 VPN) ... is there some setting either on the Z1 dashboard or in the Client Software to allow local network traffic while connected? I am using the Win 7 Pro 64 generic Windows Network Connections to connect to a Z1 VPN
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 308 | 01-23-2022 02:37 AM |
