Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About YellowKLR
About YellowKLR
YellowKLR
Here to help
Member since Mar 26, 2020
Jul 24 2023
Community Record
15
Posts
6
Kudos
0
Solutions
Badges
Jul 21 2023
11:20 AM
I downloaded iPerf and will work on testing tonight, Our hub is an MX100, and the spokes are MX64/ 67. All are up to date, running FW 18.107.2.
... View more
Jul 21 2023
10:44 AM
2 Kudos
Thank you for the tip about MS being the cause! I will try the WireShark workaround as a temp fix. I had started looking at AnyConnect earlier in the year, getting a quote for licenses now.
... View more
Jul 21 2023
9:32 AM
2 Kudos
Uplink Config And the rest of it...
... View more
Jul 19 2023
10:34 AM
Disabling the split tunnel did not help.
... View more
Jul 19 2023
10:16 AM
Thank you Ryan! Updating the Primary uplink changed the WAN 1 status to "Active". I have also updated the Primary uplink on our remote firewalls. For the site to site - I've tested 6 sites, the rest we received reports of slowness. I stopped testing because downloading and uploading the same file yielded the same results on all 6 - hub>peer=2mb average, and peer>hub=1mb average. I ran a test last night having PDQ push the same file to various machines over the site to site VPN. Sending to 1 machine, it was a 2mb speed. 2 machines was about a 1mb speed. 4 machines was just under 500kb speed. If I deploy the same file to 4 local machines, speed is 7-8mbps each. Is it possible the site to site VPN is only allowing 2mb of bandwidth?
... View more
Jul 19 2023
9:07 AM
Thank you, I will test that this afternoon. Since we do not have a WAN 2 - should I also change the Primary uplink to WAN 1?
... View more
Jul 19 2023
8:37 AM
I am troubleshooting issues with slow client VPN (300kb!) and site to site VPN (1-4 mbps) speeds. WAN 1 is our Internet connection. Port 2 on the firewall feeds a distribution switch. In SDWAN & Traffic Shaping > Uplink Selection, the primary uplink is set to WAN2. But Appliance Status > Uplink does not show that WAN2 was configured - though it does have a button "Convert port 2 to primary WAN". Also, the WAN is listed as "Ready", not Active. There is no internal documentation, I have no idea why it was set up like this. From what I have read, with this configuration all Internet traffic will be trying to exit from port 2 - which is not an internet connection, so it will then fail over to WAN 1? Is this a misconfig, or am I missing something? Would I be correct to change the Primary uplink to WAN 1 and disable Active-Active Auto VPN? Will changing the Primary uplink to WAN 1 disrupt outgoing Internet traffic, or will users not even notice?
... View more
May 15 2020
2:21 PM
1 Kudo
Yes, I was checking the site-to-site outbound firewall. I did the trace route from the client VPN to a remote site - it did not go to the MX90. I recreated my W10 VPN connection in case there was an error, still can't get to the remote site. We have the VPN connection set up for split tunnel, so I changed the setting to have the VPN connection use the default gateway on the remote network - and I was able to access resources on the remote site. Our system changes have not been well-documented, so I'm guessing that IT laptops were initially set up with a full tunnel VPN connection so we could manage all of our remote sites when off campus, even though the official documentation states to use a split tunnel. Thanks for the assistance and nudge in the right direction.
... View more
May 15 2020
11:51 AM
Hello, When I am connected to the client VPN on our MX90, I am not able to access resources on our remote sites that are connected via site-to-site VPNs. Here's the background... Our Dashboard had all the switches installed across 23 remote sites in one network, and all the APs in another network. I reorganized the Dashboard, creating combined networks for our remote sites. Before the reorganization, I could access resources on all of our remote sites when connected to the client vpn - but no longer. The client VPN runs on the MX90 at our main site, I can access all resources on that site's subnets, but I cannot ping anything on the remote subnets. The firewalls can ping each other. I confirmed that the client VPN on the MX90 is included in the VPN. On the remote MXs, I looked at the remote VPN participants and confirmed that the client VPN subnet was listed as a participant. The site to site VPN was not changed, it is set up with the MX90 as the hub, and all other sites as spokes. Does anyone have suggestions as to what I can check?
... View more
Mar 28 2020
8:46 AM
1 Kudo
Thank you for all of your responses - I am new to the community, and appreciate how helpful everyone is!
... View more
Mar 28 2020
8:34 AM
* You could create some backup scripts I looked at the API documentation when someone referred to using to manage SSIDs, using it is going to be a learning curve for me. I want to move just the first network and make sure everything works as it is supposed to. I'll wait to do more stores until that first one opens up again, just to make sure nothing goes wonky. Hopefully by that time I'll have learned about the API and can make use of it.
... View more
Mar 26 2020
2:18 PM
* In your case you shouldn't be moving switches, but combining existing networks All of our switches are in 1 network, and all of our APs are in another network - so I will be creating a combined network by moving the MR and MS for the site into the same network as the MX. Example: For our B'ville store, I was expecting to take the store's MS from RM-Switches and MR from RM-APs and move them to the existing MX-Bville network.
... View more
Mar 26 2020
2:06 PM
We run thrift stores, it is a light load,no analytics needed. Each store has an MX, one MS and one MR.
... View more
Mar 26 2020
12:49 PM
Much of our organization is shut down at the moment, so I figured this would be a good time to do some cleanup. When we moved to Meraki, our dashboard was set up to have separate networks for each firewall (22), then all of the switches from all sites were in one big network, and all APs in another. I've been researching best practice, and want to switch to combined networks. I've read how to move forward, it seems straightforward and I am planning on converting one of our closed stores tomorrow. Has anyone run into any 'gotchas' or unexpected behavior when moving to a combined network?
... View more
My Top Kudoed Posts
© 2024 Cisco Systems, Inc.
