Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Netwow
Netwow
Building a reputation
Member since Mar 15, 2018
Jul 13 2023
Community Record
79
Posts
13
Kudos
2
Solutions
Badges
Jan 5 2022
2:23 PM
1 Kudo
We are working to connect Logic App Meraki with Sentinel to ingest logs for the limited logs that Meraki allows. The Base Url doesn't seem to work with the connector and the documentation is very scarce . Looking for someone who has successfully deployed this solution. https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/register-custom-api https://docs.microsoft.com/en-us/azure/sentinel/data-connectors-reference#cisco-meraki-preview
... View more
Nov 5 2021
5:54 AM
I was thinking. If I DNAT the hub2 t the VWAN what , if any would be the implications of advertising that DNAT subnet in the 3rd party remote subnets.
... View more
Nov 4 2021
1:00 PM
While I understand that a VMX is the preferred method as a hub in the public cloud, it is not a feasible option for a deployment I am working on .We have over 100 sites that all have an MX. We want to use a 3rd party (Azure) as the VPN hub. Only 1 branch need connectivity to all of the other sites but that traffic needs to traverse Azure (3rd party hub) . Due to the limitation of VPN enablement on a spoke having to be connected to at least 1 hub, I am going to choose 1 of the spoke locations to be a hub and then block the traffic from other sites to the meraki hub. Now, for the site that actually needs to connect to the spokes (call it hub2 192.168.1.0/24), How can I advertise it's subnet in the 3rd party VPN so that it traverses Azure first before it reaches it's destination (spoke 192.168.2.0/24). I don't think I could add the 192.168.1.0/24 as a remote subnet as it would conflict with the on prem hub2 network which has a connection to Azure. I know it is not ideal but there has to be a way to have a non-meraki 3rd party vpn peer who's role is the hub.
... View more
Labels:
- Labels:
-
3rd Party VPN
-
Azure
Oct 21 2021
4:48 PM
There are 70 + sites in an organization . There is a 3rd party tunnel to a vendor. Some of the IP ranges overlap with the vendors other client's tunnel . They have asked us to NAT. Each 1 of the sites has a /24 subnet. The NAT they want to provide us with is a /27. We know the limitations of the MX and Nat so we have built a VWAN hub in Azure with all sites connected and the 3rd party vender. This still requires a 1 to 1 Nat however the vendor is not willing to provide a larger NATTd subnet . Has anyone ever experienced a similar issue and if so how did you resolve it, short of putting an MX at the vendor's site?
... View more
Labels:
- Labels:
-
3rd Party VPN
-
Azure
May 11 2021
7:22 PM
Yeah I love the Vmx but in this design we are going to have a few Fortigates too . The Vwan is staying so I need it to work .
... View more
May 11 2021
5:45 PM
I need over 70 tunnels and redundancy. Most of the traffic is to Azure.
... View more
May 10 2021
7:45 PM
We have deployed Vwan and connected several site. Connectivity to Azure is good but Site to site is not. We want all traffic to be sent to Azure and route to other sites via vwan. Yes firmware is above 15.12
... View more
May 3 2021
3:14 PM
I have a similar issue where a 4g cradlepoint is between the MX and the cable modem. We are unable to establish 3rd party VPN tunnels due to this issue. The DHCP address for the MX comes from the cradlepoint not the cable modem. If we connect it to the secondary WAN port we run the risk of incurring charges. Is there a solution ?
... View more
Apr 9 2021
7:15 AM
Thanks @cmr I appreciate the help. That is exactly where I was going with it .
... View more
Apr 8 2021
2:29 PM
Looking for away that we can implement remote testing of failover to LTE. The fear is that if failover did not occur we would be down until local status page could be accessed by a onsite resource. How could we safely and effectively test ISP failover remotely .
... View more
May 8 2020
2:06 PM
1 Kudo
After spending time with Fortigate and Meraki today we were able to achieve tunnel connectivity. There were multiple issues so I thought it would be a good idea to post them in case anyone else ever comes across this same issue. First, when establishing a tunnel to a non-Fortigate vpn peer, object groups/names are advised against. Using the subnet is the way to go . Second, Fortigate side had to turn off Nat Traversal (I found this odd but it worked) Third, MTU had to be adjusted due to the Fortigate sending Jumbo frames.
... View more
May 8 2020
9:49 AM
We have a need to build an Ipsec tunnel from a Fortigate in AWS to a VMX100 in AWS. When initially configured we were able to establish Phase 1 . Phase to on the fortigate always showed as failed. We involved Meraki support to verify Phase 2 because the dashboard stated the tunnel was up. Phase 2 was never established. After troubleshooting (changing the psk , bouncing the tunnel, etc. ) Phase 1 will not establish. Has anyone had any luck with similar cloud security appliances ?
... View more
May 8 2020
8:18 AM
2 Kudos
Go to SD WAN>Firewall>Layer 7 > scroll to the very bottom and you should countries. I believe this requires an advanced security license .
... View more
May 7 2020
11:46 AM
Have a customer that has several on prem MXs at multiple locations. They also have a VMX100 deployed in Azure. Layer 7 rules for countries is not available on the VMX but it is on the hardware MXs. Question: What would be the best practice for blocking a particular country from the VMX ?
... View more
Mar 30 2020
7:36 AM
I adjusted the metric last week and no change. The user can map the drives using the IP address but not the FQDN. I can ping FQDN.
... View more
Mar 27 2020
4:17 AM
We are testing client VPN . It is enabled and users are able to connect. 2 out of 4 users are unable to resolve host names from mapped drives. The other 2 users are. DNS server is at the DC across a VPN tunnel to a non-meraki peer. All are Window 10 . Here is what has been attempted with the assistance of support. IPs of servers can be reached via ping. 1) enabled WINs specified DNS server 2)Hardcoded DNS into NIC of clients that could not connect. We spent a lot of time of the phone with support but still do not have any resolution. Suggestions ?
... View more
Dec 17 2019
10:35 AM
Thinking of using the MG21 for WAN at a remote site during construction. I want to connect an MX . If the MG is POE which MX has a POE WAN port?
... View more
Nov 6 2019
9:51 AM
Thought about that but then there is the 2 internet edge switches (not stacked) with redundant ISP uplinks.
... View more
Nov 6 2019
8:58 AM
I have 2 MS425 in a stack with 2 MX250 in HA with a VRRP vlan and cable. I need failover for the MS425 stack . When port 1 on each core is connected to port 8 on each MX I get a loop. What is the preferred config to achieve stack failover?
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 2251 | May 8 2020 2:06 PM | |
| 2415 | Mar 29 2018 12:49 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 3597 | |
| 2 | 5372 | |
| 1 | 3716 | |
| 1 | 2251 | |
| 1 | 2232 |
© 2024 Cisco Systems, Inc.
