Meraki

alemabrahao · ‎Nov 10 2022

@JayHylander I agree with @ww

alemabrahao · ‎Nov 10 2022

just give me a few minutes.

alemabrahao · ‎Nov 10 2022

but in my understanding, in that part specifically, if you want the Spokes to reach that network you need to set the HUB as the default route. I'm going to test this here in my lab.

alemabrahao · ‎Nov 10 2022

I found this information, but I have never tested It: https://help.cloudi-fi.com/en/articles/3177550-cisco-meraki-mx-routing-tunnels-deployment

alemabrahao · ‎Nov 10 2022

I'm not sure but I was thinking maybe you have to create an S2S VPN with each site.

alemabrahao · ‎Nov 10 2022

Take a look on route table after configure S2S VPN.

alemabrahao · ‎Nov 10 2022

When you configure a non-Meraki VPN, an entry will be created in the routing table called IPSec Peer. Assuming you configure it in the HUB the route will be announced to all Spokes automatically.

alemabrahao · ‎Nov 10 2022

MX doesn't have that level of granularity.

alemabrahao · ‎Nov 10 2022

I performed a lot of tests with this version, and It has a lot of issues, like performance, VPNs, etc.

alemabrahao · ‎Nov 10 2022

Use a group policy:

alemabrahao · ‎Nov 10 2022

Take a look at this discussion: https://community.meraki.com/t5/Security-SD-WAN/URL-filtering-newbie-question/m-p/35369

alemabrahao · ‎Nov 10 2022

CRC means Layer 1 issue. Have you tested It on another port or switch?

alemabrahao · ‎Nov 10 2022

@RANT First I strongly recommend downgrading to version 16.16.6, if you look we have several other threads open related to instabilities from version 17.10.x. Meraki even removed version 17.10.1 from the stable release list and 17.10.2 is a stable release candidate.

alemabrahao · ‎Nov 10 2022

Great. 😀

alemabrahao · ‎Nov 10 2022

Can you give us more information? What kind of authentication? Does this happen with only one SSID or all? what tests have you done?

alemabrahao · ‎Nov 10 2022

Go on Meraki dashboard, go to help and cases.

alemabrahao · ‎Nov 9 2022

MS225's just have limited Layer 3 capabilities like inter-VLAN connectivity - they don't have full Layer 3 routing abilities.

alemabrahao · ‎Nov 9 2022

Nope, It supports L3 routing, and limited Layer 3 capabilities like inter-VLAN connectivity - they don't have full Layer 3 routing abilities.

alemabrahao · ‎Nov 9 2022

Open a support case.

alemabrahao · ‎Nov 9 2022

Change encryption for AES, and follow these recommendations: Security & SD-WAN -> Configure: Site-to-site VPN -> Non Meraki VPN settings: Preshared secret must be greater than 14 characters Authentication cannot be MD5 Diffie-Hellman Group must be 14 Phase 2 encryption cannot be NULL PFS can be configured to be either off or 14

alemabrahao · ‎Nov 9 2022

There is an option to update users: Update Network Meraki Auth User Operation Id:updateNetworkMerakiAuthUser Description:Update a user configured with Meraki Authentication (currently, 802.1X RADIUS, splash guest, and client VPN users can be updated) PUT /networks/{networkId}/merakiAuthUsers/{merakiAuthUserId}

alemabrahao · ‎Nov 9 2022

If you configure some port on your MX or switch in the same VLAN, and connect a notebook with the internet cable, Do you have this issue?

alemabrahao · ‎Nov 9 2022

Who Is your DHCP server and Default gateway. Have you performed a packet capture?

alemabrahao · ‎Nov 9 2022

I think that it can help you: https://developer.cisco.com/meraki/api-latest/#!create-network-meraki-auth-user

alemabrahao · ‎Nov 9 2022

Is it a MX? If yes downgrade to version 16.16.6, the version 17.x is not stable yet.

About alemabrahao

alemabrahao

Alessandro Abrahao

Community Record

Badges