Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Tintin
Tintin
Getting noticed
Member since Apr 15, 2021
Monday
Community Record
27
Posts
2
Kudos
2
Solutions
Badges
a week ago
Yes, I realized that was likely the reason a while posting my post (so I edited it to add that). Thanks!
... View more
2 weeks ago
Also on MX100 and wondering about this, so bumping this thread. Tested yesterday to connect directly to the fibre to Ethernet converter and thus omitting the MX100 and then the bandwidth to the Internet was 850 Mbit/s down and 936 Mbit/s up on the 1 Gb connection we are paying for. When connected to the MX100 it got down to 382 Mbit/s dow and 394 Mbit/s up. So more than half of available bandwidth is lost. I know the MX100 does quite a lot, but still that's a bit too much bandwidth lost, no? Any suggestions on what to check? Firmware is the current release: MX 18.107.2 Aha, maybe it's about this? If my calculations are right, that setting should give 200 Mb/s to each client, so then I actually get more than I should. 🤔 😃 But maybe that is due to the ”SpeedBurst” setting which boosts the bandwidth for a while over five seconds.
... View more
Dec 14 2023
8:08 AM
Hi! I have a bunch of static routes setup in Security & SD–WAN -> Addressing & VLANs Now I wonder if it's possible to let specific IP addresses in the different ranges get bypassed/ignored? For example I have this IP range set as one of the static routes 160.48.0.0/14 and it works fine, but I have one site which IP address is within that range and I'd like to exclude it from a being a part of that static route. Is there a way to do this without having to fiddle with my lists of static routes?
... View more
Labels:
- Labels:
-
Other
Oct 11 2023
1:35 AM
Thanks for elaborating on your setup! I did try using a Mac running Windows 10 the other day and there it was no trouble accessing any of the internal websites and having: Synology DNS 8.8.8.8 8.8.4.4 deployed via DCHP. What I did now was to change in Meraki so it only deploys (via DHCP) the DNS coming from Synology. The Synology itself will forward addresses it can't resolve to 8.8.8.8 and 8.8.4.4. Seems to work fine now and I don't get the wired behavior for internal addresses depending on the browser used in MacOS that I described in my original post. At the same time I think it would be good to have a DNS backup in case the Synology goes down. So I'll continue to investigate what this behaves the way it does in MacOS.
... View more
Oct 6 2023
1:35 AM
Hi! I'm thinking if this is a MacOS issue or not. But I also know that having the Socket Filters from Cisco Secure Client installed and active fully solves the problem and makes the pages from the custom DNS load consistently across all web browsers. The issue is this: We have a Synology acting as an internal DNS server and it come out to the clients via DHCP among the two Google DNS's 8.8.8.8 and 8.8.4.4. So DNS servers are: Synology DNS 8.8.8.8 8.8.4.4 The problem is that sometimes MacOS isn't always using the custom (Synology) DNS and then the internal websites addresses we have set up there won't resolve since it tries to use the Google DNS for that instead. It also behaves differently depending on the web browser when trying to access one of the websites handled by the custom DNS. •In Chrome it loads every time. •In Firefox it works if the address is in the address field and ”return” is pressed to go to the site. If I refresh the page it Firefox say it has trouble finding that site. •In Safari it works to load every other time, i.e. the first time I enter the address and try to access the page it loads, but if I refresh the page it ”can't find the server”. Another refresh and it loads again. Having the address field focused with the address in there and pressing return also works every time. 🤷 Anyone knows why it behaves this way and why does the Socket Filters (namely the DNS proxy) that gets installed when installing the Cisco Secure Client solve the problem? I don't see why having that installed should be a requirement in this case. Thankful for any insights on this!
... View more
Oct 6 2023
12:52 AM
The reason for my trouble in this thread was that we had ”Statics routes” setup in: Security & SD-WAN -> Addressing & VLANs And the IP address for https://securelogin.bmw.com/ was covered within that range and therefore the the traffic was being routed internally instead of externally. Sorry for the confusion and thanks all for trying to help! 🙂
... View more
Jun 14 2023
7:18 AM
Thanks so much for your reply! 🙂 All of this has been tried except the Meraki network power off. What is the recommended way to do that by the way? 🤔 If that also don't work, what is the next step?
... View more
Jun 14 2023
2:11 AM
Hi! Trying to access this publicly accessible web page: https://securelogin.bmw.com works fine to load when connected to the Internet via my mobile phone, but when connected to our Meraki network it won't load. Just getting a time out. I'm wondering where to start troubleshooting this? If I do an nslookup I get the same result from both networks (resolves to the same IP number), so don't really know what the problem is. 🤔
... View more
Mar 27 2023
7:43 AM
A bit unsure how to set it up. If I just need VPN tunneling to a few specific IP addresses on our LAN, how do I specify that? Would that help with performance instead of routing all traffic via the VPN (I guess it would)? Sorry for my ignorance and thanks for the help!
... View more
Mar 22 2023
12:32 AM
OK, thanks. But not sure how to do that. ”Only send traffic going to these hostnames” and adding the details for our LAN? Do I do it for both ”Client Routing” and ”Dynamic Client Routing”?
... View more
Mar 21 2023
8:49 AM
Yes, AnyConnect VPN is what it says when I open the Cisco Secure Client.app Setup like this in the AnyConnect Settings in Meraki:
... View more
Mar 21 2023
7:49 AM
Forgot to mention I in the above test used the Cisco Secure Client application and operating system MacOS Ventura 13.2.1 So thanks @alemabrahao, but no; I haven't tried that. I think ”Use default gateway on remote network” is an option in Windows, right?
... View more
Mar 21 2023
6:56 AM
Hi! I know there has been a few posts about this before and I understand there will be some throughput loss when connected to the VPN – I just think what I'm seeing is a bit much. For example, on a Wi-Fi with a 100 Mb/s theoretical connection I yesterday got 82 Mbps on the website fast.com which after connecting to our VPN yielded a drop to 22 Mbps. Isn't that a bit much or is this drop to be expected? Anything that can be done? Hardware is MX 100 with firmware MX 17.10.4
... View more
Labels:
- Labels:
-
Client VPN
All problems seems to have been solved since updating the access point to firmware MR 29.4.1.
... View more
Sorry, what do you want to know? 🙂 Not sure what info to provide to isolate the problem more – if I would have known I would have done it. Thanks for the links to these articles! But the problem also happens on Windows devices. And the reason for using band-steering and 2.4 GHz was because it was recommended in a Meraki article when more than one SSID was used. I have been using only 5 GHz and the 20 MHz channel too – the disconnects still happened then. Aslo good to know about the difference between M1 based Macs vs Intel ones. But we have several more MR42 base stations that don't give any disconnect trouble, it's only on that particular base station and SSID.
... View more
Thanks for the links. I was using only 5 GHz before, but changed to band steering because it said that was recommended when broadcasting more than one SSID. The thing is, when the ”disconnect” happens it also applies to a computer running Windows, so it doesn't seem operating system related at all. What also don't make much sense to me is that all the other Cisco access points of the same model and firmware that we have placed around the locale don't disconnect like that particular access point that is broadcasting an SSID that the other base stations don't. So the problem seems to be that particular SSID for some reason. And like I mentioned, it has been working reliably for six month before the problems started.
... View more
It did happen before I went to MR 28.71 and that's why I decided to try going to MR 28.71 (not sure what I was on before) since I saw there were some updates concerning MacBooks in the MR 28.71 firmware. I'm thinking it might be worth to try the MR 29.4 beta.
... View more
This is how the RF profile currently associated with the access point looks like. I enabled ”band-steering” because ut was suggested when more than one SSD is used – was using only 5 GHz before.
... View more
Thanks for elaborating @alemabrahao! 🙂 Turning Layer 3 roaming off seems to have done nothing to wifi stability. 😞 Okay, I will try to enable 802.11r set to ”Adaptive” (found the setting now: Wireless -> Access control) and see if that changes anything. One setting change at a time. 🙂 Shall I enable 802.11w in some form otherwise you think? I guess I should read up more on what it does…
... View more
OK, so you suggest I should dare go for the MR 29.4 Beta? 🙂 Currently on MR 28.71.
... View more
802.11w is disabled. Authentication is done via Pre-shared key (PSK). Not sure where I find the setting for 802.11r, sorry. Is that about the roaming? I see Layer 3 roaming is enabled. Edit: Just disabled Layer 3 roaming. Not sure why it was enabled as we don't use that for any of the other SSIDs. Hope that does it. 😄
... View more
On one of our MR42 access points we have added an SSID that is separate from the one we use for the rest of our MR42 access points spread throughout the locale. Things has been working fine until about a month ago where the users of that SSID started to get seemingly random disconnects from the Wifi network on that particular SSID. The ones on the other SSID we use don't have this problem, but it's also worth mentioning that these are not often close to that particular access point. What happens is that all of the devices connected suddenly drops the connection to the wifi and then it takes a while until it's possible to connect again. Sometimes the devices connects back automatically after about 30 seconds. We haven't changed any setting or so, so I'm staring to think there might be some external interference or something. All devices are on the current firmware as of this typing and everything looks green and healthy in the Meraki dashboard. Average channel utilization is ”low” to ”very low” for both spectrums (we only use 5 GHz though) and I can't see any obvious faults anywhere. Several devices show as getting ”802.11 disassociation unknown reason” from time to time, but that is also seen on the other base stations where the wifi disconnects don't happen. I have no idea where to start troubleshooting this. I did use the ”Wireless Diagnostics” tool on one of the MacOS machines and it did come up with ”Conflicting Wi-Fi CC” being ”yes" – there are several base stations in the proximity (not ours) that seem to be set to use country code DE and FR while our is set to SE since we are in Sweden. Could that be the problem? What can I do about it in that case – I mean I'm not really in control of what settings people in the building where we're at use for their base stations.
... View more
Sep 28 2022
1:58 AM
How does it look at the ”Event log” tab for the the access points? I'm also having trouble with dropouts for various devices and in the event log I (among other things) see: That info ”i” to the right of the messages doesn't give any info when clicked or hovered over. 😞 Another log entry for a devices says: 802.11 disassociation – disassociated due to 802.1X failure I see there are other threads about ”802.11 disassociation” problems, but no clear answer on what to do about it. I guess it's complicated. 😄 Edit: Maybe this thread could be on to something: https://community.meraki.com/t5/Wireless-LAN/802-11-disassociation-issues/m-p/76859
... View more
Getting this same problem now and then (”802.11 Disassociation - Unknown Reason”) on MR42 access point running firmware MR 28.7.1. It has been working fine since a couple of weeks ago when the disconnects started. Don't know of anything that has changed on our side. Could it be something with the firmware for the access point? We're running the currently released version as of this writing. Any ideas on what to do to solve this?
... View more
You mean it's a requirement for the server behind the URL? At the same time, the whole idea of the VPN is to get the same kind of access as if one were connected to our wifi. But maybe... 🤔 I'll see if I can ask them (BMW). I think I can share the URL, it's an Outlook mail server here: https://mail.bmwgroup.net Thanks for trying to help. 🙂
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 529 | Oct 6 2023 12:52 AM | |
| 4150 | Dec 15 2022 11:01 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 4150 |
© 2024 Cisco Systems, Inc.
