Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Happiman
Community Record
97
Posts
14
Kudos
2
Solutions
Badges
Jun 28 2019
1:52 PM
Hi 🙂 Whether you're impressed or not, please set up your syslog with Roles "Flows" and capture the udp==port 514 from your syslog server. You will see the source IP address. I didn't say that Meraki sends the syslog over the Internet. They just put all the syslog packets under the sourcing IP of the portal.
... View more
Jun 28 2019
10:05 AM
the real IP address that your Syslog server will see is the IP address of Meraki Portal. In my case, 6.78.245.4.
... View more
Jun 11 2019
2:04 PM
and please run debug ip bgp and debug ip tcp transactions as well.
... View more
Jun 11 2019
1:47 PM
can you capture packets on the BGP Interface? I am curious how MX handles eBGP with a multihop.
... View more
Jun 11 2019
12:05 PM
1 Kudo
Please configure multihop on your CORE RT. Since eBGP always assumes the neighbor router is only one hop away, TTL of one. https://networklessons.com/bgp/ebgp-multihop
... View more
Jun 11 2019
9:59 AM
Hi, I had two Internet connections for HQ and each branch office. ASA injects redistributed static route to the core switch, or you can create a generic branch office subnet(10.10.0.0/16) toward ASA. Then create more specific static route (10.10.10.0/24 for Branch A, 10.10.20.0/24 for Branch B) to Meraki whenever you switch over onto it. That how I did for 80+ branches. However, if I could do it again, I would set up a MX100 on a transparent mode so that I could use OSPF.
... View more
May 21 2019
12:30 PM
1 Kudo
We will have to see your debug to identify which phase is breaking up.
... View more
May 21 2019
12:20 PM
I found the flow prioritization is ineffective or not working when I wanted to fix the VoIP call quality. You will have to limit other traffic flows under certain % of your given bandwidth from ISP
... View more
May 21 2019
12:14 PM
I found a couple of links to identify the public subnets but there are two many. You can download the list of subnets from here . https://www.microsoft.com/en-us/download/details.aspx?id=53602 And these people were trying to identify the actual subnets that belong to the windows updates. https://social.technet.microsoft.com/Forums/windows/en-US/b596aa81-2775-496c-b159-dcfc5c5bf22d/windows-update-ip-addresses-range-and-subnet-mask-for-windows-server-2008?forum=winserversecurity So I'm thinking these are the subnets for the window updates. 65.52.0.0/14 70.37.0.0/17 70.37.128.0/18 94.245.64.0/18 111.221.16.0/20 111.221.64.0/18 132.245.0.0/16 157.54.0.0/15 157.56.0.0/14 157.60.0.0/16 207.46.0.0/16 207.68.128.0/18 213.199.128.0/18
... View more
May 21 2019
11:41 AM
I don't have a L2L vpn between fortigate and meraki but I do have fortigate for my edge firewall. could you share your debug on VPN? diagnose debug app ike 255
diagnose debug enable https://cookbook.fortinet.com/ipsec-vpn-troubleshooting/
... View more
Apr 18 2019
2:02 PM
I am using CradlePoint as a backup on WAN2, then use WAN1 as a primary w/o load-balancing.
... View more
Apr 18 2019
1:57 PM
To make this one happen, you will have to use your Meraki as a VPN concentration mode so that your L3 switch forms an OSPF neighbor. At the same time, you will need to run OSPF on EVPL. Between two source of routes, you can influence the preference with cost/metric.
... View more
Apr 18 2019
1:36 PM
If you have many subnets to advertise from your data center, one arm concentrator mode is useful. After all, you will run OSFP and form neighbors between MX and your edge firewall.
... View more
Apr 18 2019
1:10 PM
Meraki MX won't accept a port channel link aggregation.
... View more
Mar 5 2019
11:00 AM
I'm not 100% sure, but I think i won't work. Meraki has its own product line.
... View more
Mar 5 2019
10:56 AM
You will have to remove the broken MX from the network first. Configure the WAN IP address on the new MX Plug the cables. That's it.
... View more
Mar 5 2019
10:53 AM
I'm trying to use L3 ports on my downstream switch to connect MX100 HA. I was able to use L3 port on my down stream port when I had a single MX to connect. I understand that Meraki does not support LACP bonding. Will that also apply to L3 Port-Channel Interface on the downstream switch?
... View more
Mar 5 2019
9:47 AM
Ports on the Fortigate are L3 and Cisco 4507E has L2 & SVI. Since there are L3 ports between MX and Cisco Switch Loop will not happen?
... View more
Mar 4 2019
4:18 PM
Testing Phase Three-way Connection I need to migrate a traffic path which is going through Fortinet firewall device right now. Once the migration is done, Data Center network(192.168.1.0, 192.168.9.0) will pass Meraki straight without Fortinet Fortigate firewall. To test the migration, I am going to connect a cable between Meraki and the Core Switch and pass only a few specific routes (ex 192.168.13.0/24, 10.13.10.0/24). Other subnets will be passed by 192.168.0.0/16. Once the migration is done, I will remove a cable between Meraki and Foritgate If I connect Meraki and Core Switch will it create a L2 loop?
... View more
Feb 20 2019
12:54 PM
You might have to reboot the HA several time until they sync correctly.
... View more
Feb 20 2019
12:10 PM
For BGP, you can advertise your LAN subnet, such as a connected network through EBGP between peers. For example; <Your L3 Core switch> router bgp 64555 <--Your DC AS number bgp log-neighbor-changes neighbor 192.168.19.52 remote-as 64512 <--Meraki iBGP neighbor 192.168.19.52 timers 60 180 ! address-family ipv4 redistribute connected route-map SERVER_CONNECTED neighbor 192.168.19.52 activate neighbor 192.168.19.52 soft-reconfiguration inbound exit-address-family route-map SERVER_CONNECTED permit 10 match ip address prefix-list SERVER_SUBNET ip prefix-list SERVER_SUBNET seq 5 permit 192.168.132.0/24 DC2-SW1#show ip route conn Gateway of last resort is 192.168.19.41 to network 0.0.0.0 C 192.168.132.0/24 is directly connected, Vlan503 L 192.168.132.1/32 is directly connected, Vlan503
... View more
Jan 17 2019
4:52 PM
HI Anyone can confirm that I can advertise a /24 and /32 at the same time? for example, use MX to advertise 192.168.130.0/24 and CoreSW to advertise 192.168.130.101/32 to the Spoke Site ?
... View more
Jan 17 2019
1:23 PM
Hello my Meraki Warriors ! I am trying to advertise a host route(/32) from a secondary data center. The MX is terminating its Auto-VPN and is formed a OSPF neighbor with the DC switch. Since MX is on its transparent mode, I cannot add the route from it. It has to come from another OSPF neighbor. Is it possible to inject a static route though OSPF redistribution from the Core switch to Branch MX's routing table through Meraki VPN concentrator? DC CoreSwitch: router ospf 1 router-id 192.168.19.10 passive-interface default no passive-interface Vlan129 no passive-interface FastEthernet0/1; Fa0/1: IP address 192.168.19.10 network 192.168.19.10 0.0.0.0 area 0 (transit subnet between DC Edge FW and CoreSW) network 192.168.129.1 0.0.0.0 area 0 (for MX subnet) network 192.168.130.0 0.0.0.255 area 0 ( for Server subnet)
... View more
Jan 10 2019
2:04 PM
yes but it's all about the data center design. As we all know, Meraki lacks many advanced firewall/VPN features, such as policyNAT VPN etc..., I cannot use it as I use ASA in the DC. Its role remains as an AutoVPN termination point in the data center.
... View more
Jan 10 2019
1:22 PM
Yes, I used to use the routed mode but to make the route advertisement more dynamic with OSPF, as Meraki Recommands, I will use the concentrator mode.
... View more
- « Previous
- Next »
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 2107 | Sep 25 2019 12:21 PM | |
| 2117 | Aug 29 2019 12:16 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 3 | 31678 | |
| 2 | 19383 | |
| 1 | 26783 | |
| 1 | 2405 | |
| 1 | 1988 |
© 2024 Cisco Systems, Inc.
