About TLO3346

TLO3346 · ‎10-08-2021

@cmr It worked !!! Thank you for everyone's help.

TLO3346 · ‎09-28-2021

With one AP and one SSID for the AP that is setup with a click through splash page after pre shared key WPA authentication and in No Bridge NAT mode.

TLO3346 · ‎07-08-2021

@Bruce I don't believe so, we have static IPs on all disconnecting sites. @PhilipDAth That's a good though but we also have two WAN IPs at these sites so it should have just done load balancing to the other WAN if one fails but it just falls off the network and no messages regarding the WAN disconnecting is never recorded. Could these be False Positives??

Inderdeep · ‎06-17-2021

@AlexP : Yeah correct, Hope @TLO3346 checked on pre-loaded URLs as well.

Inderdeep · ‎04-27-2021

@TLO3346 : Really ? Hope you restored

cmr · ‎04-22-2021

@TLO3346 we have many combined networks that have MXs, MRs and MSs in but the core is Cisco IOS L3 switching. In fact we only have one site where we have nothing but Meraki! It all works well, the only minor downsides are that the topology diagram may not show correctly and clients directly connected to the non-Meraki devices may show up as being connected to random ports. Even without combining the networks you will see both of these so as far as I am concerned, combine them.

Bruce · ‎04-21-2021

In response to the second part... > Will this significantly decrease performance in the network as Meraki stated? The decrease in performance is due to the additional VPN tunnels that the MX has to maintain. In a hub and spoke each spoke will have between 1 and 4 VPN tunnels depending on the design. When running in hub mode the MX is having to maintain 1 to 4 VPN tunnels to all other hubs in the organisation... a significant increase, which is what creates the load on the MX. You need to check the MX Sizing Guide to see how many VPN tunnels your devices will support.

cmr · ‎03-22-2021

@TLO3346 we use Tessian, but there are quite a few good options, it does depend on what your employees are like and what data you value most.

BlakeRichardson · ‎03-16-2021

Also get a second person to try and "break" or "Bypass" what you have done so that you get confirmation that what you want to achieve is actually happening. A second pair of eyes is always very useful with this kind of thing.

TLO3346 · ‎03-16-2021

Yes, The geolocation embedded in the sites do not work when connected to the VPN. The link that you shared does state that some sites detect the use of VPNs and auto block geo location of the IP so that may be the issue but I was trying to find anything else that maybe I had control over.

Bruce · ‎03-15-2021

The 'Bandwidth' field that you highlighted is applied to every client on the network across the total of their traffic. The 'Traffic Shaping' fields allow you to apply specific traffic shaping for a traffic type. That shaping may have to be within the limits of the client or it could ignore the per client limits, and it may apply only to one or more applications, hosts or networks.

Bruce · ‎03-12-2021

Yep, it means that. If you are doing a full tunnel (I.e. the hub is the default route) then no traffic will exit the spoke directly to the internet, it will all go into the tunnel and exit via the hub. However, I’d suggest that more often than not the spoke MX would be configured as split tunnel so internet traffic gets routed directly from the spoke MX so the hub doesn’t become a bottleneck. Configuring the firewall rules on a MX isn’t generally too hard anyway. By default they allow all outbound initiated connections, and deny all inbound initiated connections.

TLO3346 · ‎03-11-2021

The Spoke is connected to the Hub that is connected to the phone system so in theory it should be connected.

TLO3346

Community Record

Badges

Re: Can't move MR to Another Network

Re: Splash Page Wifi Setup Iphone

Re: site-to-site VPN connection Dropping

Re: Adding too many blocklist URLs in Content Filtering

Re: Forbidden 403

Re: Combining Networks

Re: Content Filtering need to be configured for every network?

Re: DLP Service Recommendations

Re: Best practice for firewall rules

Re: Geo Location unavailable for certain sites.

Re: Bandwidth Limiting

Re: Spoke and Hubz Firewall wall.

Re: Dropping Calls

Re: Can't move MR to Another Network

Re: Forbidden 403

Can't move MR to Another Network

Re: Adding too many blocklist URLs in Content Filtering