Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Philbud
Philbud
Getting noticed
Member since Dec 14, 2017
Oct 28 2019
Community Record
21
Posts
3
Kudos
0
Solutions
Badges
Oct 27 2019
11:05 AM
Yes those subnets are in use with my other mx (site-to-site vpn) across my network! Tunnel is coming up but tunnel route is not working because phase 2 doesn't complete successfully. Trying to find a solution...this is frustrating! Thanks for your help
... View more
Oct 27 2019
10:50 AM
Thanks @JasonCampbell and @Nash So if on the Fortigate side they already have some of those subnets (that I use on Meraki) already on their local network we are doomed? With Fortigate we only need one route to work. So if I understand correctly what we want to do is impossible because we have a few subnets that are the same on both sides (even if we don't want to share those routes)? Thanks again
... View more
Oct 25 2019
9:03 AM
Quick question: In order for phase2 to end sucessfully do we need on fortigate to have all the route (in tunnel) that have VPN participation on on meraki even if they need to access only 1 subnet and same thing our side?
... View more
Oct 25 2019
4:49 AM
Thanks to you both, I'll take a look at those 2 things. I have a feeling it's the p2 phase. We'll try to get a sucessfull results and see if it routes after that. I'll post the results here. Best regards
... View more
Oct 24 2019
12:58 PM
Thanks for your help on this: 1) not sure what you mean here... We are in 172.16.10.x (meraki side) and 172.17.82.x (on fortigate side) 2) Yes subnets are shared 3) This is new tunnel 4) I think so but I'll double-check with Fortigate admin on the other side Could it only be a p2 problem since we never get a p2 success in logs? That would be reason why we never get the route table active for vpn.
... View more
Oct 24 2019
11:34 AM
Thanks for your help When looking at the logs I see: msg: IPsec-SA expired: ESP/Tunnel x.x.x.x[500]->x.x.x.x[500] spi=82540378(0x4eb775a) msg: initiate new phase 2 negotiation: x.x.x.x[4500]<=>x.x.x.x[4500] msg: IPsec-SA expired: ESP/Tunnel x.x.x.x[500]->x.x.x.x[500] msg: x.x.x.x give up to get IPsec-SA due to time up to wait. So I don't see a successfull phase 2 negotiations but vpn status is green when going in vpn status. Is that possible? If subnet from fortigate sends ping to a local subnet of Meraki I see packet (if I do a packet capture) but packet never goes back accross. It seems to stay stuck on Meraki.
... View more
Oct 24 2019
11:00 AM
Maybe someone can help me with this. We are able to setup a non-meraki peer vpn between an MX100 and a Fortigate firewall. I see that tunnel is up in vpn status but route never seems to go online in route table. We are not able to ping from 1 subnet to another. Are we missing something? VPN status for tunnel: green Route Table for tunnel: not online (grey)
... View more
Jul 19 2018
7:48 AM
We have a MX100 (firmware 13.28) and it is connected with our Active Directory. Everything is working fine in this regards but since a few weeks we lost the ability to see who is connected on client in client view. On some rare instance we still see it but for the most part we lost this feature. Anyone can help me with this?
... View more
Apr 9 2018
6:16 AM
Anyone can help me with this? Is it normal that even if you have a layer 7 firewall rule blocking Spotify that it is possible for computer on network with the spotify desktop app to stream music? Thanks for your help
... View more
Apr 4 2018
10:45 AM
Ok our Meraki MX100 has latest firmware version MX13.28 and Spotify app on desktop still works. Anyone can help me with this? How can I block Spotify via the desktop app?
... View more
Mar 27 2018
7:30 AM
No I can confirm that I restarted computer mutiple times for testing and that it's streaming content not downloaded. Via application it works on all computer I tested on network. I checked also and all clients are on the normal device policy which has the layer 7 deny spotify policy. thanks
... View more
Mar 27 2018
6:51 AM
1 Kudo
HI all, we are presently in process in testing an MX-100 device. We are scheduled to put it in production soon. I have a stupid problem and I can't seem to find solution anywhere...We want to block spotify on network so I made a quick Layer 7 rule that denies Spotify. When testing after that I see that it blocks sportify.com when I go on website which is ok but if someone has the application installed on their computer they can still play music! What am I missing here? thanks
... View more
Dec 14 2017
7:39 AM
1 Kudo
Finally it was a route missing in my core switch! Thanks for the help guys
... View more
Dec 14 2017
6:19 AM
Ok thanks I think you led me to something. Maybe I'm missing a route for this subnet on my core switch. Let me check. Thanks for your help
... View more
Dec 14 2017
6:11 AM
Yes I can browse internet on computer that is connected to VPN but I can't ping or go on my office network since I'm not getting any gateway address.
... View more
Dec 14 2017
5:52 AM
Hi maybe someone can help me with this. I'm new to Meraki systems... I have a MX100 sitting behing a L3 Cisco 3750 core switch. Everything is working fine so far but i'm starting to test vpn connections for our users on the road. I connected our AD for authentification and that part is working. I'm able to connect to vpn with my AD account. I'm getting an ip address in the range that I sent for VPN users but I don't get a gateway address. If I do a ipconfig /all I get 0.0.0.0 has default gateway so I cannot ping anything on internet network. Anybody can help me with this?
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 8594 | |
| 1 | 8703 | |
| 1 | 10550 |
© 2024 Cisco Systems, Inc.
