Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About rahmad
rahmad
Here to help
Member since Feb 4, 2020
Aug 4 2020
Community Record
13
Posts
0
Kudos
0
Solutions
Badges
Jul 18 2020
9:58 PM
Hi @tannermoreno With my workaround setup as i explained above, everything is working fine so i don't think it's configuration issue.
... View more
Jul 18 2020
3:38 PM
Hi @Nash, So our existing setup is using Mikrotik RB which will be replaced by this MX84. For workaround, I decide to connect MX84 WAN 1 port to this Mikrotik and making some sort of bridge mode and this is works. I can talk to my ISP to see whether they see some traffic or not, but i'm more curious about the red interface LED mean, do you ever seen this before ? Also i think this is related to MDIX problem since the modem itself is fairly old but i am not sure
... View more
Jul 18 2020
2:13 PM
Hi @tannermoreno, I'm not sure about MAC validation since when i try to directly connect from modem to 2 different laptop it has no issue whatsoever.
... View more
Jul 18 2020
6:06 AM
Hi Everyone, I have a brand new MX84 which deployed in my company branch, but when i try to connect MX84 Internet port to ISP modem, the interface is up but in red LED. Dashboard also showing WAN 1 is in failed condition. I've already try to change interface speed from auto to every option & also trying to swap cable but still no luck. When i try to directly plug modem to my laptop there is no issue at all. Does anyone know what red interface LED mean within MX product ? Regards, Rahmad
... View more
Mar 30 2020
1:34 AM
Hi Phillip, Thank you for your answer! 1 more question, i know if this is a bit more off topic, but can you deploy Passthrough Mode behind router not firewall ?
... View more
Mar 29 2020
12:17 AM
Hi all, I've question regarding overlap route in AutoVPN. Recently i read this documentation : https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior#DC-DC_Failover Let's assume all those DC is Hub with NAT Mode. 1.Based on statement in that documentation, is it true that if DC 2 is down/unreachable by Branch MX, route failover to DC 1 will not happen for 10.1.0.0/16 ? If so, i seems can't quite understand why that's the case. I'm assuming once DC 2 is down, route for 10.1.0.0/16 will be deleted in AutoVPN, is this correct ? 2. Is there any other solution so 10.1.0.0/16 can failover to DC 1 ? Any answer is appreciated, thank you.
... View more
Mar 20 2020
6:34 AM
Hi Philip, Thank you for your answer. Since both MX will have static route pointed for AWS via Core, is this allowed in AutoVPN ? Because i've read in doc below it says "All subnets advertised from an appliance in Routed mode must be unique within the AutoVPN topology." Source : https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior Or maybe can we advertise a slight different subnet ? for example, in DC we will make a static route to 172.16.1.0/24 and in DR site we will make a static route to 172.16.1.0/23 ?
... View more
Mar 20 2020
6:03 AM
Hi Philip, Whoops, i forgot to draw that, yes both DC DR is connected by L2 Metro E connection. And about Warm Spare, i also forgot to put that MX in DC will be HA Pair already. Attached the diagram revision. About the same subnet advertised, it's actually subnet in AWS cloud not in DC DR sites. To make it short, the goal is to keep branch connected to AWS server even when DC site is blown up 😄
... View more
Mar 19 2020
10:26 PM
Hi guys, I want to ask regarding same subnet advertising in AutoVPN. Here is the background, MX250 deployed in both DC & DR acting as Hub with NAT Mode. Both MX will be advertising subnet in AWS (172.16.1.0/24) so Branch will have failover route to AWS in case DC is down. Recently, i've read that same subnet advertising only work in Passthrough Mode, so based on my case do i need to change the deployment model to Passthrough ? or is there some way to make it work even in NAT Mode ? Topology is attached. This is still my rough plan, so no MX is deployed yet. Any recommendation is appreciated, thank you 🙂
... View more
Feb 22 2020
8:48 PM
Thank you for your answer. Do you have any performance issue for deploying with diagram above for large scale deployment ? we will do split tunnel so we expect MX250 to handle VOIP traffic and some internal apps stuff.
... View more
Feb 22 2020
8:31 PM
Ahh, i got it now, thank you for your explanation. And about the subnet, we can't change existing subnet because application and stuff. We will translate only 2 /24 subnet for each branch, is that too much for MX64 ?
... View more
Feb 22 2020
5:13 AM
Hi everyone, I'm fairly new with Meraki and have question regarding design best practice. Here is simple diagram for my deployment plan. Pair of MX 250 will be hub and deployed in routed mode with public IP. There will be +- 200 branch, all with same overlapping subnet user. My plan is to translate those subnet to something summarizable (10.0.1.0/24,10.0.2.0/24....) and from core perspective i will just add static route with branch summary address pointing to the MX. My questions is : 1. With diagram above, is it fine to deploy vpn concentrator on routed mode ? since i have read the documentation best practice to use passthrough mode for vpn concentrator and i'm still not clear what is the downside for using routed mode 2. Do i need to use virtual IP in MX 250 HA pair ? what is the downside of using same uplink IP ? Any recommendation is appreciated, thank you. Regards, Rahmad
... View more
© 2024 Cisco Systems, Inc.
