Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About ED3573
ED3573
Comes here often
Member since Sep 16, 2020
Jan 11 2023
Community Record
5
Posts
0
Kudos
0
Solutions
Badges
Jan 10 2023
1:48 PM
I cannot add public IP addresses using Layer 3 as source because they are not configured as a Subnet. "Does not apply to any configured local or VPN subnets in the source field" I don't know if this is the way, we have the Advance Security License, I did the following test I added a public IP into this L7 Rule Proceed to access and it worked I wasn't able to access the web server from that specific public IP, would be nice if we had an official method of doing it with layer 3 or in the NAT were a clause block for doing it. Thank you.
... View more
Jan 10 2023
11:58 AM
Thanks Brandon, Well that's the thing we have a NAT rule for a webserver but I want to block an specific address, but the only thing I see is "Allowed remote IPs" over the NAT rule not block. I have geoblock in place so what happens if I have an allowed country and one specific address from this allowed country is trying to brute force the web server?
... View more
Jan 10 2023
11:45 AM
How do I block an external IP address using a Layer 3 rule? I have created a network object and group but when I try to added to the source and if I give it on the destination field the rule doesn't work at all. "Does not apply to any configured local or VPN subnets in the source field" Is there anyway to create rule to block specific external IP address to not allow to get to internal resources? or this is not possible with the NAT rules.
... View more
Sep 17 2020
8:23 AM
All of our branch offices use Meraki and Comcast business for every branch, same as our main office.
... View more
Sep 16 2020
6:26 PM
I been migrating our sites from Cisco ASA to Meraki (Main Site MX250) (Branch office MX64), I found a lot issues regarding file transfers SMB, FTP is insane, I never had these issues with our ASA even when our ISP circuits were small at that time only 5MB it was saturated at least at 3MB or now we had 15MB on all our remote sites and it doesn't' even pass from 1MB, FTP or SMB, we have 43 branch sites, all the same, we have tested this without AMP, no bandwidth throttling policy, no flow control on the servers, no SMB signing on the servers, Iperf actually use all the bandwidth on the tests, latest beta firmware (without this we had response times between 100ms to 150ms on the branch offices), after the upgrade the latency was reduced between site is 5ms to 20ms, find on the community forum other options that I have already tried netsh int tcp set global timestamps=enabled same issue. When I call to support I don't get any answers or at least a light on this, just always the same excuse saying that this is on the ISP side, I recently called the ISP we tested the circuits and there is nothing wrong with the circuits, even the speedtest are normal. I recently found a post from guy in spiceworks mentioning something like this. Good idea to check your Meraki WAN config for "Do not Fragment packet" statement. Next to the MTU limit. This will free your flow. I had the same issue with a Site-to-Site VPN on a Sonicwall NSA 3600. But I can't find that option to give it a try.
... View more
© 2024 Cisco Systems, Inc.
