I did a little poking around and it turns out that it is only listening on port 81 to VLANS that have VPN Mode Enabled. Any MX IP addresses that are for VLANS with VPN Mode Disabled are not open on port 81. ... View more

I ended up running a building to building bridge from Ubiquity. ... View more

I prefer one and really don't like the other so hopefully I won't be disappointed! ... View more

Ah, I guess I was lucky then! 😎 ... View more

When i log into the dashboard the thing that comes to mind, is how much work i might have ahead of me for the day 🙂   Apart from that, would be a list of issues across various areas of the network based on severity. This would enable a quick look into whats going on and what needs to be tackled first ... View more

In my setup, the issue was that my password had changed that was being used to authenticate users with our AD server. I hadn't updated the password in the dashboard that Meraki uses to verify/authenticate with our server.  ... View more

Started using Manageengine Desktop Central for Endpoint management /Patch management ... View more

That sounds like a suitable workaround, but obviously not ideal if the MG21 is further away (dual cable runs).   It also prevents the "MG to dual MX" HA option... so unfortunately the "dedicated VLAN on a PoE switch" seems like the best option. ... View more

Just found this  Routed Mode and AutoVPN You can only advertise the same subnet from more than one appliance if all appliances advertising that subnet are in Passthrough or VPN Concentrator mode. All subnets advertised from an appliance in Routed mode must be unique within the AutoVPN topology.     https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior ... View more

    It sounds like to me the link is being overloaded and then packets get dropped.   have you tried prioritizing some of the traffic via traffic shaping / QoS.     ... View more

Thank you. I look forward to many more Meraki discussions, boosting my knowledge and sharing it with others.   Congratulations to all other winners. ... View more

Running a traceroute from a place that does have reachability to your mx vs the traceroute from the guys who cannot could identify if they are being blocked early or near the last hop towards your network. Usually the final hops towards your own router are always the same so you should at least see if they reach the hop right before your MX barring the ISP sends ICMP ttl expire messages back to you of course 🙂 ... View more

On every uplink decision row, where it says WAN1 or 2, that is clickable and you will be able to see the latency, loss, jitter and mos statistics for each uplink towards the peer.   If your primary WAN is not behaving correctly you should check if you have problems due to a bad connection or you are trying to send too much data over that link and the ISP is dropping packets accordingly.   If you feel the connection is stable enough then you could make a custom performance class that has less strict requirements and apply that to your uplink decision.   The takeway however is that your VPN is not actually bouncing.  You have continuous active active VPN links up.  It's the traffic you send that can vary per packet. ... View more

Congrats to the winners! ... View more

I'm seeing a lot of ESP and ISAKMP traffic on the WAN side and when I capture on the LAN side it shows as encrypted. I'm going to open a ticket. Thanks for your help! ... View more

Hi basicly, after vlan is made , i will start wifi from it, and since its for 1 person only i would say 10 ip adress at max will be fine , how much will be smaller number of adresses that can be created defined by network something around 10 or the next available number, sorry guys i am not a network engineer, thats why you are here : ) to give me a hand. So what network settings i should write,     so far in my life i used variety of networks pppoe , static, dhcp etcs...  but i never used or created vlans,  and i also never used meraki so for me all this thing is kinda new and in someway complicated meraki have tons of menus, So i really need to create this vlan - i guess wifi network will be much easier to put and start on that vlan if meraki cisco have not made it super complicated there too?   ... View more

Thank you all guys for your input. I managed to make the network work as expected.   I didn't alter my initial configurations on the MS, i reseted the FortiGate and configured it via the CLI, after  i did that i realized that everything was working accord to our requirements. I didn't do much.    Many thanks to all who have contributed to my technical problem. ... View more

a way around this though, which is common practice from a security perspective is set all devices to UTC time.   This way all devices log with the same time markers, and if you are looking for issues between sites across the globe issues should be easy to find. ... View more

I would just put two Cisco Firepower 1120 in the two offices and run an IPsec VPN through the other organisations infrastructure. And if they provide you two ports you could also do redundancy. Another solution would be (but I am pretty sure the other organisation can not provide the infrastructure for this) to put two Catalyst 3560-CX in both offices and protect the link with MacSec. This would work if they can provide you a "patched" link without any of their outdated switches in the connection. ... View more

Thank you Nolan! Appreciate it.  Looks like it was just my internet dropping off.  Cheers for the clarity. ... View more

‘Twas the night before Christmas when all through the house, not a packet was stiring nor a spanning tree mouse. The Vlans were configured with meticulous care in a hope that the traffic would pass with no mare.   The switches were all nested all snug in their racks, while visions of cloud config danced in their stacks. Operations were watching and I for a call, at home in the evening for the switches to fall.   When out in the cloud arose such a clatter, I sprang from my bed and answer, what’s the matter. Away to the console I flew like a flash, login to the portal and search in a dash.   And then in a twinkling the config did see, a rouge little route injected for me, with a tap of the keys and a 30 second wait the switch to resolve and the previous clam state.   I sprang from my chair with a laugh and a glee, Oh switchmas tree, oh switchmas tree your cloud updates never fail to amaze and save me.   So with that Christmas saved and a turkey for the table, thank goodness for Meraki and the things that cloud updates enable. ... View more

i spoke to Meraki about this and their multigig capability and wifi accomodated standard as i have to do a 5yr lifecycle for site deployments for up and coming projects.   Currently multigig capability (theoretical is just under 5 gig even though multi gig 10 is out there).   So where am i going ? there are always technologies in the pipeline. Multigig throughput and anything beyond wifi 6 there are no current products planning to be released in the near future.     ... View more

Thanks for the T-Shirt!!!!. So i guess i can say I ended 2020 with my head in the cloud! or is that upper torso! ... View more

Sure am, although not originally - but been here 20 years. ... View more

no problems. sometimes it just needs another perspective when looking at how to tackle the problem ... View more