😂 go Dave go!! ... View more

Hey @Johan    Basic things first. Remember the MX is not a switch and does not speak STP and does not support UDLD either. So what you are dealing with is one switch only which is your root bridge too. Both ends of a link need to support UDLD for this feature to initiate. Since the MX does not support it, enabling UDLD in your topology is useless Loop guard does not apply to your topology either. I'd not apply it. For your topology enabling RSTP  without any STP guard options (root, loop, bpdu-obviously) is enough. doing to should give you one of your fibre links in forwarding and the other in blocking.     A note on UDLD, as mentioned in your case is useless since the MX does not support it,  in valid cases when UDLD is enabled, Meraki recommends to do it in "Alert Only" mode   https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MS_Switching/General_MS_Best_Practices   Finally, regarding the "correct" topology. I am afraid that what you have is correct because of your two uplinks to the same box (MX). if you disable one of the uplinks you should see a more comprehensible topology. with both enabled you should be able to see a check box "Show redundant links" which makes the topology a tiny bit more comprehensible.     ... View more

enable RTSP on both uplinks to make sure one of the uplinks is in blocking state.     ... View more

Yes,  In essence setting statics with the option "while host responds"  The host being in the far end of the link. then the fail over follows the default route priority. statics come before the non-meraki VPN peer, so if the route learnt statically is removed because the tracked host is not responding, then the routes injected by the non-meraki vpn peer should kick in. ... View more

Hey @PhilipDAth  Thanks for your reply. Good to now the Auto VPN works.  I am more after the non-Meraki VPN peer situation as shown in the pic.  I guess if the auto VPN works, the non-Meraki VPN peer should establish and work with relative quality.   Any experiences with non-Meraki VPN peer in this situation?     ... View more

Hi @PhilipDAth    Regarding your comment " The second option is build a non-meraki VPN between the MX hub in China and your MX hub in your own country."  I am actually  planning that approach and have some questions about it. I know that non-meraki VPN peers work and I am familiar with it.  I am not sure if the peer would establish  due to the "great firewall of China" and if it does what the quality would be between an MX in the china cloud (meraki.cn) and one MX on the global cloud   Do you have any experience with it? Would the non-meraki VPN between the MX hub in China and the MX hub outside china (hong kong) establish? What is the quality, would it bounce constantly, packet loss?   Thanks! ... View more

this is a rather old thread. I hope you found a fix. The way to point a static route to the LAN devices: - Use a "transit" vlan between your MX and the LAN device (L3 switch) - Point the static to the L3 switch ip address on that "transit" vlan.   ... View more

AP = Access Points indeed. Wireless Access Points ... View more

Did you ever find the solution to your issue? ... View more

@Woosie  have you actually used those VANTEV antennas and cables you are mentioning with a MX67C?  Im curious to know if it really worked fine and solved your problem. ... View more

Follow normal recommendations for STP. On out case, we are using MS devices as L2 only at the access layer.. Our core L3 devices are 4500 cisco. we use the follwing settings that work perfect. *Root guard: Configure at core on all ports to access switches and on access switches to APs *BPDU guard: Configure in all access ports *Loop guard: Configure in uplinks to core *UDLD enforce on uplinks to core ... View more

@Adam Yeah, returning the MX64W and getting the MX64, according to my Korean counterparts (site is in Korea) would take around 2 months. Yep I considered too making a new template to cover the mx64W case. I may not even use a template since the MX64W will be the only one in the organization. given the input from @Mr_IT_Guy, I'll try to use the mx64 template I already have.   Cheers lads ... View more

Thanks @Mr_IT_Guy  So then, if I bind the MX64W to the MX64 template, since the MX64 template has no wireless settings, the mx64W wireless will remain unconfigured. Correct?     ... View more

MerakiDave  Im based in Europe, Amsterdam, The Netherlands to be precise. Are you guys planning to host a Meraki Masters course in this area in the near future?   I'd love to attend if so. ... View more

@MerakiDave Im based in Europe, Amsterdam, The Netherlands to be precise. Are you guys planning to host a Meraki Masters course in this area in the near future?   I'd love to attend if so. ... View more