Guys, Morning. After change to IKEV2, i see in the event logs, many register VPN no-Meraki. Verifed the uplinks in the firewall MX, no latency, drops in the links, no register. Any recommended changes to the peer settings? Thank you.
... View more
Normally ACL's on MS switches are VLAN ACL's so you should be able to just block traffic coming from that VLAN to any private RFC1918 address in 3 rules and that should effectively also isolate guest clients from each other.
... View more
Sinelnyyk, That is what we are trying. Z3 connected to MX_A that is non-meraki VPN connected the MX_B in a different org. Trying to get Z3 access to network behind MX_B. We were thinking it was something routing related as the MX_B network was not in the route table on the Z3 but is on MX_A. easiest test would be to go the VPN tunnel route between Z3 and MX_B. if we get this working they will have three others in the same situation. Thanks
... View more
> I am guessing it just loses support / replacement but will still continue to work? Correct. Product End-of-Life (EOL) Policy Meraki End-of-Life (EOL) Products and Dates
... View more
As far as we know the tunnel is working fine. I have green lights for status and I can ping across it. We just had someone come to us saying the access to our ERP system was seeing excessive errors and the errors they are seeing happen on lesser quality networks. They were asking for a review of packet loss and latency across the link. I unfortunately only have visibility of this side of the link as the other side is in a different organization.
... View more
By default all ports are configured as switch mode trunk, switchport trunk native vlan 1, switch trunk vlan allowed all. Since every possible VLAN ID is always available if you really want to prune VLANs on the trunks you can either create the VLANs in the VLAN profiles page (network wide -> VLAN profiles) if this feature has been enabled en add them to a VLAN group. Then you can easily add that group to each trunk ports you want to configure. Also, very important bit. Use the switching -> switchports page to control all the Meraki ports in your network and make sure they all have descriptive tags so you can always select multiple ports from multiple switches and configure them in 1 go and consistently.
... View more
