Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Atags
Atags
Getting noticed
Member since Mar 30, 2018
Apr 12 2021
Community Record
25
Posts
2
Kudos
1
Solution
Badges
Jan 27 2021
8:28 AM
Hi, Can you setup a HA pair with (2) MX250 Firewalls long distance? We have 2 WAN circuits coming in from different sides of the building. Do they have to be near each other to that? Or doesn't matter? How would I go about this if distance is not an issue for HA? Just have the HA be setup through a network switch? Thank you
... View more
Jan 27 2021
8:14 AM
Hi, I am very familiar with physical stacking and what is does. I have worked with both Meraki and Cisco Catalysts for stacking. I am curious, if 2 MS425-32 Core switches that are separated by long distance inside a building where a physical stack cable won't work, is there a way to stack these over long distance? and if yes, how exactly does it work and what is needed? Would it be the same thing and physical in terms of having that 1 virtual switch for ports and administration if done this way? Thank you
... View more
Jan 22 2021
5:13 AM
@Bruce Ok great thank you very much for all your responses and help! I never worked with APIs before yet and this environment is small so I think I will just keep as is for now. Again thank you!
... View more
Jan 20 2021
9:28 PM
@Bruce Thank you again! So I upgraded to the latest Beta 15 version (Although I think 14 would have worked as well), and I have it working through the Group policy and L3 FW rules. I tested with an VPN account. My only question left is, does this group policy only get applied to the PC he/she logs in from? Or Does this group policy get applied to the username, so that if this username VPNs in from another machine wherever, the same group policy and rules will apply?
... View more
Jan 20 2021
7:37 AM
@Bruce again thank you. Question, so because I have to go to Network-wide -> Clients, does that mean that the user first needs to be created and then actively logged in, in real time in order to apply the policy to them, and see the VPN symbol? And does the policy get applied to only his actual device like a PC? Or his/her user name I create in the Client VPN section? If its just the PC, then if he/she logs in from another device, this would have to be manually re-done again right? If its the username, then it wont matter, meaning they can log in from any device as long as its under that username and credentials right? One other thing, Is the MX15 firmware Beta versions only? The latest one that comes up in my Dashboard for my MX100 is only the MX14.53 version. Thanks!
... View more
Jan 19 2021
10:09 PM
@Bruce Thanks for explanation and time. Not sure if doing this right or docs on this but I tried creating a group policy in the Network Wide tab and then Group Policies. But it looks like there is no option to specify any security usage. Also not sure where to apply that group policy too on the actual VPN user, as this is also not an option either under the Client VPN and users section. Also when you say Client VPN devices, are you referring to their actual PC/WAN IP at home they remote from? I just noticed I am running MX version: 14.42 so not sure if newer versions (15+) have these options you were stating? I attached a photo
... View more
Jan 19 2021
5:35 PM
Thanks Karsten. So I am guessing by your response that the answer to my questions is no then? Thank you
... View more
Jan 19 2021
3:18 PM
Hi, I am trying to achieve the following; I would like certain users of client VPN only certain access to our internal VLANs. So I have a MX acting as my firewall connected to my Cisco CORE switch and Access switches downstream to our internal VLANs (LANs). If I understand correctly, you can only have 1 subnet for client VPN access in right? So based on that, is there a way to limit certain users to access only certain internal subnets only? Example: Bob after using client VPN can only access VLAN #11 and be denied access to all other internal VLANs But Allice using client VPN can access all internal VLANs. If not from above, I don't think FW rules or Cisco ACLs would work because you can only have 1 client VPN Subnet, so restricting 1 VLAN would affect everyone connecting remotely i would believe? If not, how can I achieve this from Meraki MX firewall solution? or with Cisco switches if known as last resort? Thank you,
... View more
Feb 27 2019
11:48 AM
Hi, Yes the traffic would be internal to the stack. Capturing on the trunk links and/or core switch would only show traffic going between floors or inter-vlan traffic. That i understand, but my question was specifically for the same switch (same floor) traffic. How to capture all those ports and the impact? Thanks
... View more
Feb 27 2019
11:36 AM
Hi, I have a client that wants to collect internal data on a internal switch stack and mirror that to an security appliance device. The MS 350 switches are L2 only and are in stacks of 8. Is there anyway to capture most of the switch traffic and mirror it to a security device off the switch in a simple way? Or do you just have to simply click on all the ports you want (lets say 300 out of the 384 ports possibly in the stack of 8 switches) and click mirror? Also if doing that, how would the performance/resource CPU impact be on the switch stack as a whole if enabling all of that? Thank you
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 9161 | Feb 27 2019 12:31 PM |
© 2025 Cisco Systems, Inc.
