Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About FDM
Community Record
14
Posts
1
Kudos
0
Solutions
Badges
Jan 19 2021
2:12 PM
Hi, I have an MX-450 WAN-1 connected via 10G SFP to internet reachable segment. Port 19 connected to LAN segment in specific VLAN and setup as trunk. All otter ports on the device are set to disable except 19. The dashboard however display port 20 is up. I have disable port on 19/20 on the switch where it connect to so both should not be active and not displaying as green I suspect. Other strange thing that happen is when I activate port 19 the MX seem to have trouble reaching the internet over its WAN port. The device status led go to orange. And I seem to loos the device on the dashboard, if disable the port again on remote switch end it doesn't seem to solve the problem and I have to reboot the device. Then it seem to be ok again but I need port 19 ofc to connect to other segment.
... View more
Jan 18 2021
7:18 AM
Hi, I need to have a directly connected subnet. On one end of the firewall. Must be seperated physically. Otherwise i would Go for one armed would make my life easier.
... View more
Jan 18 2021
6:15 AM
Hi Greenman, Yes in considered placing it as One armed but this doesn’t suit my requirements. The wan ports will have private IP but with outbound internet access otherwise autovpn will not work. The tunnels will formed on private IPs then. Frederik
... View more
Jan 18 2021
5:01 AM
Hi, I have a question about the WAN-1 port on a Meraki, does it need a default route to connect to the internet? Suppose i have the below topology, the WAN-1 port is allowe to internet but has a private IP, remote sites connect on the private IP using auto-vpn. I do not want the default route to be on WAN-1 but on VLAN-Y, VLAN-Y doesn't have internet access. Will the WAN-1 still be able to connect to the internet? WAN-1 ofc has a gateway configured.
... View more
Nov 18 2020
11:40 AM
Hi Joe, This is what I did but is not possible i think due to the faxt the native vlan is set to 1.
... View more
Nov 18 2020
9:12 AM
Hello, How can i remove the subnet configured on VLAN 1? I cannot set it to empty then i get an error VLAN must be in IP address range CIDR format. I do not want to assign an IP address to VLAN 1 that is what i am trying to accomplish. The native VLAN can remain on 1. Kind regards, Frederik.
... View more
Nov 5 2020
6:07 AM
Hi, I have the following requirement an MX-450 on internal network will be used to setup VPN tunnels over MPLS. There will also be traffic that is going to be routed into the MX-450 interface wihout VPN. Can i disable hide NAT and create inbound - outbound rules on the MX? I already searched forum and read it should be possible to disable hide-nat or setup no-nat mode but i can't find where to do this. (running code MX 15.38)
... View more
Aug 6 2020
2:41 AM
Hi Seshu, Thank you for the reference. I do have a question about the following statement regarding VPN concentrator. Passthrough or VPN concentrator The secrurity appliance acts as layer 2 bridge and does not modify client traffic. Configure VPN to enable communication with remote peers. Only one WAN uplink can be used in this mode. The layer 2 is what is confusing me in one armed mode the vpn traffic is routed back over the same interface i guess. It is not that it is building Layer 2 VPN's over IPSEC?
... View more
Aug 4 2020
2:36 AM
Hi, I have a question about Auto-VPN. In HQ I have a meraki MX-250 connected to the internet via it's WAN port 1. And i have another port LAN port connected to the Datacenter.(MPLS network). I want to establish a VPN over the MPLS only. Will the Auto-vpn feature work on the LAN port? Of to i need to use the second WAN port for this?
... View more
Jul 29 2020
5:22 AM
Hi, First I have never worked with Meraki before but have the following requirements. I need to provide guest internet access at branch offices. The branch offices only have MPLS connections and no local internet breakout. For guest internet access a separate internet line is provisioned at HQ. Branch MX firewalls can reach Meraki cloud platform for management using normal internet line routed over other firewall. I would like to build a separate IPSEC tunnel to the MX in HQ to provide internet guest access. The Meraki firewall for guest at HQ has a public routable IP at WAN side and should also have an internal IP that is reachable over the MPLS to establish IPSEC tunnels between BRANCH and HQ. I have read so fare that you can deploy MX in concentrator or routed mode. I guess I need to use routed mode. Can I use the auto VPN feature for this or should I use third party VPN. I am not looking for a detailed technical approach but some direction on how to best approach this. With the cloud management and auto-vpn I don't really now how this works. RED LINE IPSEC, BLUE MGT for Meraki branch to cloud platform.
... View more
© 2025 Cisco Systems, Inc.
