Hi everybody,   We have two sites one of is HUB and the other site is branch for customer PoC. Hub behind Checkpoint firewall, branch have two interface for WAN and twice are pppoe connection. So ISP. modems are working bridge mode.   Hub side MX behind the Checkpoint firewall and its work concentrator mode and we use manual port forwarding for Auto VPN. We have incoming nat rule at Checkpoint firewall for incoming traffic from internet to LAN IP address of HUB MX. (only udp port 19350 which we use this port at maneul port forwarding at hub mx vpn setting) Hub mx lan port (its has single port) use another real ip and natting at Checpoint firewall when it try to connect internet.  At the branch site we have only one mx and two wan interface. WAN1 and WAN2 is working pppoe so we have two ISP modem and they are working at bridge mode. Real ip is concentrate at MX for two WAN interface.  Normaly everything is working fine. But, when we unplug WAN1 interface of Branch MX and then plug it less than 5 minute (for example 10 second or 2 minutes) the vpn connection for this interface doesn't come up again. So WAN1 interface get real ip and internet traffic working fine for this interface. We wait 10 min, 20 min or 30 min bu VPN doesn't come up for this interface. If we restart branch mx or disable/enable branch mx WAN1 port Branch WAN1 VPN connection to HUB come up again. But, if we plug this interface after 5 minutes vpn communicating come up immediately, no problem. If we change Branch MX WAN1 interface type to NAT mode. Test work fine, no problem. We have TAC case and they get some of packet capture but they couldn't solve this problem quickly.  I want to ask you, when we get packet capture from branch site WAN1 interface try to communicate with HUB local ip address and HUB is trying to communicate with branch WAN1 public ip address with via its local ip address. is it normal? and do you have any idea about this problem? do you think pppoe may cause problem? We have internet and nat policy (communicate with internet) and from outside to inside nat rule and port forwarding for HUB device(we identify this ip address and port number at vpn setting manual port forwarding section) at HUB CP Firewall. But I sad before its different from other ip address when hub device try to communicate with internet.  I try to identify our problem, could you pls help us. Because this is PoC issue and if we couldn't solve this problem we will lose this project:( I attached jpeg file which explain our topology with random IP adress.   ... View more

Hi there,   When primary line is down and 4G failover trigger, it was take 2 or 3 minute. Is there anything that can be done to make this process faster??   Thanks ... View more

Hi everybody,   I want to examine MX firewall logs. I want to filtering traffic regarding to some parameters. For example, I want to filter source port or source IP and application. I know this information can getting from syslog data. But in these data application information doesn't include. So are there any way or 3rd application to see and filter meraki mx firewall logs?   regards, ... View more