Meraki

Herixon · ‎Mar 8 2021

Hi! We are implementing dot1x authentication with Cisco ISE and MS120, MR33 and MR46. Every thing works fine but we can't implement Fail Open. Our goal is that when Meraki switch or AP lose connection with Cisco ISE, like Cisco classic switches, use Fail Open function and permit all clients to the internal vlan (don't authenticate and permit every client) until the connection with ISE comes back again. Now, when the switch or AP can't reach the ISE If I have a guest vlan configured, they redirect the users to the guest vlan. But if I don't configure the guest vlan, they don't authenticate new users and block the access to the network. Unfortunately I can't find any information about this in Meraki documentation. Is Fail Open function available in Meraki? Thank you in advance.

Herixon · ‎Dec 8 2020

Same here in Sweden. All our devices in all networks lost connectivity twice this morning and now we get the server error message.

Herixon · ‎Jun 30 2020

Thank you! Unfortunately we can't allocate a supernet but we will add rules in vpn firewall. 🙂

Herixon · ‎Jun 29 2020

Hi, We have different networks in a same template with autovpn between them. We want to isolate a subnet in (VLAN10) so it can't communicate with RFC1918 addresses in the network BUT we want that all vlans10 in other networks can talk to each other. What is the best practice to do it? Right now I have a firewall rule in the outbound layer 3 section that deny any traffic from vlan 10 to RFC1918 addresses. Is it enough or should I add deny rules in site-to-site outbound firewall as well?

Herixon · ‎Apr 17 2020

This was exactly our problem. We changed the SFP and problem solved. Thank you 🙂

Herixon · ‎Mar 24 2020

Hi, Uplink switchport in our MS120-48LP (SW2) change continuously status from designated→root and root→designated. we lost connectivity with SW2 for almost one day and suddenly it came up during last night and after two hours it stopped with the STP status changing. . This switch (SW2) is connected with fiber to SW1 and SW1 is the RSTP root. When we had lost connectivity with the switch we got high CRC error on the uplink port in SW2. SW3 is connected at the same way to SW1 and it works perfectly. What cause the continuously STP status changing in uplink switchport? Is it related to Fiber & SFP or there could be another reasons? Thank you advance. Here is the topology:

Meraki

Community

About Herixon

Herixon

Community Record

Badges

Fail Open in Dot1x authentication with Cisco ISE

Re: Dashbaord server error

Re: best pratctice firwall rules

best pratctice firwall rules

Re: Switchport STP state changes continuously, what it means?

Switchport STP state changes continuously, what it means?

Re: Switchport STP state changes continuously, what it means?

Re: best pratctice firwall rules