Meraki

TLO3346 · ‎Oct 8 2021

@cmr It worked !!! Thank you for everyone's help.

TLO3346 · ‎Sep 28 2021

With one AP and one SSID for the AP that is setup with a click through splash page after pre shared key WPA authentication and in No Bridge NAT mode.

TLO3346 · ‎Jul 8 2021

@Bruce I don't believe so, we have static IPs on all disconnecting sites. @PhilipDAth That's a good though but we also have two WAN IPs at these sites so it should have just done load balancing to the other WAN if one fails but it just falls off the network and no messages regarding the WAN disconnecting is never recorded. Could these be False Positives??

Inderdeep · ‎Jun 17 2021

@AlexP : Yeah correct, Hope @TLO3346 checked on pre-loaded URLs as well.

Inderdeep · ‎Apr 27 2021

@TLO3346 : Really ? Hope you restored

Bruce · ‎Apr 21 2021

In response to the second part... >Will this significantly decrease performance in the network as Meraki stated? The decrease in performance is due to the additional VPN tunnels that the MX has to maintain. In a hub and spoke each spoke will have between 1 and 4 VPN tunnels depending on the design. When running in hub mode the MX is having to maintain 1 to 4 VPN tunnels to all other hubs in the organisation... a significant increase, which is what creates the load on the MX. You need to check the MX Sizing Guide to see how many VPN tunnels your devices will support.

BlakeRichardson · ‎Mar 16 2021

Also get a second person to try and "break" or "Bypass" what you have done so that you get confirmation that what you want to achieve is actually happening. A second pair of eyes is always very useful with this kind of thing.

TLO3346 · ‎Mar 16 2021

Yes, The geolocation embedded in the sites do not work when connected to the VPN. The link that you shared does state that some sites detect the use of VPNs and auto block geo location of the IP so that may be the issue but I was trying to find anything else that maybe I had control over.

Bruce · ‎Mar 15 2021

The 'Bandwidth' field that you highlighted is applied to every client on the network across the total of their traffic. The 'Traffic Shaping' fields allow you to apply specific traffic shaping for a traffic type. That shaping may have to be within the limits of the client or it could ignore the per client limits, and it may apply only to one or more applications, hosts or networks.

Bruce · ‎Mar 12 2021

Yep, it means that. If you are doing a full tunnel (I.e. the hub is the default route) then no traffic will exit the spoke directly to the internet, it will all go into the tunnel and exit via the hub. However, I’d suggest that more often than not the spoke MX would be configured as split tunnel so internet traffic gets routed directly from the spoke MX so the hub doesn’t become a bottleneck. Configuring the firewall rules on a MX isn’t generally too hard anyway. By default they allow all outbound initiated connections, and deny all inbound initiated connections.

TLO3346 · ‎Mar 11 2021

The Spoke is connected to the Hub that is connected to the phone system so in theory it should be connected.

Meraki

Community

About TLO3346

TLO3346

Community Record

Badges

Re: Can't move MR to Another Network

Re: Splash Page Wifi Setup Iphone

Re: site-to-site VPN connection Dropping

Re: Adding too many blocklist URLs in Content Filtering

Re: Forbidden 403

Re: Content Filtering need to be configured for every network?

Re: Best practice for firewall rules

Re: Geo Location unavailable for certain sites.

Re: Bandwidth Limiting

Re: Spoke and Hubz Firewall wall.

Re: Dropping Calls

Re: Can't move MR to Another Network

Re: Forbidden 403

Can't move MR to Another Network

Re: Adding too many blocklist URLs in Content Filtering