Meraki

Brash · ‎May 13 2022

Cisco 7940 and 7960 phones don't support the PoE standard. They use a Cisco proprietary inline power technology will only work that way with Cisco Catalyst switches. https://www.cisco.com/c/en/us/support/docs/voice-unified-communications/unified-ip-phone-7900-series/97869-poe-requirement-faq.html#qa3

KarstenI · ‎Mar 18 2022

This is a very sad story ... https://documentation.meraki.com/MX/Cellular/3G%2F%2F4G_Cellular_Failover_with_USB_Modems

Ryan_Miles · ‎Dec 2 2021

This happens https://documentation.meraki.com/General_Administration/Licensing/Meraki_Co-Termination_Licensing_Overview#Licensing_Expired_.26_Network_Shutdown

PhilipDAth · ‎Oct 31 2021

I think this might be heading towards a lot of complexity and special configs. I would put each country into its own separate org. Then there is no special config, no customisations, and everything is simple. It will be almost exactly the same to administer, except you will also have an "org" drop-down box, similar to the network drop-down box.

PhilipDAth · ‎Oct 31 2021

A spoke doesn't know what mode a hub is running in. It doesn't know if it is in VPN concentrator mode or NAT mode. You configure the hub priority on a spoke the same regardless. https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Hub-and-spoke_VPN_Connections_on_the_MX_Security_Appliance#Hub_and_Spoke_VPN_Setup_and_Configuration

cmr · ‎Oct 28 2021

@JamesMutie yes, if you have two sites that both use, for example, 192.168.0.0/24, then change one to use a different range like 10.12.3.0/24. If you move to the 10. range you can create almost as many sites as you like as there are 255 /16 networks with easy subdivisions to /24 (where you have large sites) or over 65,000 /24 networks. You don't need to move all, just the ones that overlap.

JamesMutie · ‎Oct 27 2021

@PhilipDAth If spoke1 wanted to talk to spoke 2, spoke 1 would send traffic to hub1, which would then send it to hub2, and then onto spoke2. Lets say spoke 1 peering with Hub 1 doesn't need to communicate with spoke 2 peering with Hub 2. Spoke 2 has similar networks like spoke 1. Am suspecting spoke 1 return traffic from hub 1 might be send to hub 2 hence causing a blackhole. Is this case. ? I have several Hubs in one organization but am only doing a PoC for a client with just one spoke and one Hub.

JamesMutie · ‎Oct 25 2021

@cmr Thanks Alot. Well explained

JamesMutie · ‎Oct 23 2021

@PhilipDAth Thanks Understood. The document you have shared have also explained it pretty well. To use MPLS as primary and failover to AutoVPN will only work with static routing with MPLS link connected on the LAN port of MX. But since static routing will mean they do some redistribution of the static routes within the MPLS network, This makes the design complicated and the better option will be Meraki Validated design.

ww · ‎Oct 8 2021

Mx in one armed concentrator mode can run bgp Mx in routed mode does not use dynamic routing protocol on wan. I just need 1 ip address (Or for warm spare 2 or 3(if you want vip) All other ip/traffic is inside the vpn and not seen by the mpls. Or behind that wan ip that is used as nat address by the lan subnet. In that case it would be static

wizard · ‎Oct 6 2021

you can vlsm in cidr notation

JamesMutie · ‎May 23 2021

Welcome @cmr . It is a good feature, you just need to have full access rights to the two orgs.

JamesMutie · ‎Apr 9 2021

We managed to achieve a seamless failover of the implemented solution after Cisco Meraki TAC Engineer disabled auto summary a backend feature not available on dashboard which was causing the havoc. What the engineer said is that the two hubs perform auto summary , and the summary starts being preferred over the static route which is a bit weird and we could not get answer why the summary route has a better AD. If you facing the same problem ,I recommend you open a TAC case and let them disable auto summary feature if you do not use it in your network.

Meraki

Community

About JamesMutie

JamesMutie

Community Record

Badges

Re: Cisco IP phones 7940 and 7960 models not Powering on Meraki switch MS35...

Re: Converting LAN port 4 on Z3 to Internet port

Re: Licensing for MS425-16 Core switches in physical stack.

Re: Site-to-site VPN Translation

Re: Concentrator Priority

Re: Two hubs same organization routing table.

Re: Route Table - Routes learned on AutoVPN Keeping spinning under status

Re: VPN Registry Table

Re: Dynamic Routing Protocol on LAN side of MX and Z3 devices.

Re: AutoVPN over MPLS

Re: One Armed VPN concentrator Mode

Re: One order Number two organization names 3 yr license

Re: Failover to Secondary Hub Not Working

Re: Route Table - Routes learned on AutoVPN Keeping spinning under status

Re: One order Number two organization names 3 yr license

Re: Failover to Secondary Hub Not Working