Meraki

JPScolar · ‎Jan 3 2024

Hello, What's the best way to interconnect 3 x MS120-24P switches to VMware SD-WAN VCE and provide some level of redundancy fo the access ports? I cannot use 2 x MS120-48 ports. LAN devices are organized in multiple VLANs Thank you for the comments and advice.

JPScolar · ‎Oct 29 2023

Hello, Is Dyanamic routing on the MX supported in NAT mode or only on VPN Concentrator mode? I have heard that the BGP support on the MX is lacking a bit, for instance to set eBGP connectivity to non-Meraki networks. Any comments/advice on this? Thank you.

JPScolar · ‎Oct 2 2023

I went through that document but it doesn't show how to to do for a Warm Stand-by system (HA). Also, I have a question with this setup. Assuming my DMZ server has a public IP which Im NAT'ing 1:1 to my active MX public IP. This will be ok for sessions initiated from the DMZ server towards the Internet but for outside sessions trying to reach the public IP Address of my DMZ server, and assuming my MX Public IP is provided by a different ISP from the ISP providing the DMZ server public IP, then sites out on the INterenet will never be able to reach my DMZ Web server.

JPScolar · ‎Oct 2 2023

Hello, I have this MX-100 HA site and I need to adda DMZ (services to be advertised on a public IP which s behind the MXs). How should this be configured and wired? I have the Meraki doc t set up a DMZ but this assumes only one WAN connection. Thank you very much for your advice.

JPScolar · ‎Sep 28 2023

Any advice on how to build a DMZ with a MX105 in High-Availability mode will be very much appreciated. How the Public IP addresses for the services in the DMZ behind the MXS should be routed? How the MXs should be configured for this purpose? Thanks in advance.

JPScolar · ‎Sep 16 2023

As per the Meraki documentation, I can extend the VPN to to Azure while providing high availability as per the attached picture. If understand correctly I will need an separate VNET for the vMXs, a virtual Firewall (here I'm assuming it will be a Azure virtual FW) and the Virtual WAN Hub. The vMX will be medium size. What could be the ballpark recurrent and non-recurrent costs to set this up? Does each vMX needs a separate FW. Meraki documentation mentions the vMXs must be in different regions. (two different concentrators, if the first one fails, the hbrenches will route traffic through the other VPN concentrator and not a active/stand-by high-availability mode). Thank you

JPScolar · ‎Sep 7 2023

PhilipDAth. Thank you for your comments. So, basically the vMX Sjould remain as VPN Concentrator, right? How about the Firewalling? I would need a FW inf front of the vMX. Or if this is only Auto-VPN tunnels, could I get by without a firewall?

JPScolar · ‎Sep 7 2023

Hello, I want to migrate a Cisco DMVPN network to a Meraki MX SD-WAN network. DMVPN main hubs are at a Service Provider Data Center, which in turn, provides an Express Route connection to an Azure private cloud where all services are located. I would like to build an vMX VNET at the Azure Cloud and use BGP to route to other VNETs (workload). This way I will remove the Service provider dependency. Any advise, comments, suggestions on the diffificulties of implemnting this type of network. Any thing in particular I need to pay attention to? Thank you for your help.

JPScolar · ‎Jul 27 2023

javalins, I'll try that. Thanks for the advice.

JPScolar · ‎Jul 26 2023

Is there a simple and quick way to get produce a report to tell me how many MX devices are using? * Their embedded LTE module for Failover. * An external CradlePoint device on WAN2 for Failover Thank you.

JPScolar · ‎Jul 10 2023

Hi Alemabrahao, I understand the V and H plane perspectives and omnichannel vs directed patterns. What I'm trying to understand is: A) how the scale in the polar diagram co-rellates to the gain in the datasheet? For instance, in this graph, on the H-plane I see a max gain of 10dbi at any angle but the datasheet is saying a 3 dbi gain @ 2.4 Mhz. B) what the normalized scale on the left (vertical bar) is telling me? and how does it correlates to the polar graph to the right? Can you help me with that? Thanks.

JPScolar · ‎Jul 10 2023

Can you elaborate a bit more? I see the polar diagrams but how does that answer the questions I'm asking? Thanks.

JPScolar · ‎Jul 6 2023

Hello, How to read/interpret the Antenna Radiation Patterns in the Meraki Datasheets. For instance, Dipole MA-ANT-3-B5/6 has a Gain of 3 dbi (2.4Mhz and 5.7 dbi (5Mh). The H-Radiation diagram shows a a circle (this is an omnichannel antenna) with a diameter of 10 dbi at all angles and all the inner circles have decreasing dbi. How the '10' relates to the 3 and 5.7 Gain? I assume moving towards iiner circles represents loosing Gain. Also . there is a Vertical scale to the left of the polar diagram called 'Normalized Gain' How does this relates to the Radiation/ Polar Diagram? Thank you for your help.

JPScolar · ‎Jun 8 2023

My client wants to keep its Watchguard firewalls behind the MX appliances because he wants to control its network VPN remote access for its organization while benefiting of the SD-WAN advantages. For this he will need a Public Static IP address for the firewall but I think this is difficult to implement behind the MXs. In addition, at its DC facility, we will have two MXs in High-Availability mode so changes on the IP address while on failover mode make break the Firewall VPN tunnels. Any advise on the best possible architecture to cope with this situation? Thank you for your help and comments.

JPScolar · ‎Jun 1 2023

Hello, I need to produce reports on the Active & Failover links performance on a given time period. Something like: Network Name | WAN Link Name | UPSpeed | Down Speed | Overall Data usage | Avg Throughput | Avg Packet loss. Insight produces some of this information but I need a license and I cannot export the info on a spreadsheet for further analysis. Has anyone done something similar through APIs? Any advice? Thank you

JPScolar · ‎Mar 28 2023

Any tool, application, method to produce Wi-Fi heat-maps for the MR APs before deployment? Thank you

JPScolar · ‎Mar 21 2023

Hi PhilipDath, Thank you for the reply. That seems a interesting idea. What will be the advantage of stacking, say 2 MS225, to build a core vs connecting all MS225 directly into the MX250s?

JPScolar · ‎Mar 21 2023

Thank you for the pointer. It is useful information. My problem is that the Access Switches may be a bit of an overkill for the MXs and WAN uplinks and I'm trying to figure out the best possible design given these constraints.

JPScolar · ‎Mar 21 2023

I have 2 x MX-250 in HA mode with 2 x 1Gb WAN uplinks and 10 x MS225-48 port switches. I don't know yet if the local traffic is more north-south or east-west and I'm trying to figure out the best switching design. * Do I need an additional aggregation switch, if so, what architecture will be more convenient? Spine-Leaf or 3-Tier? * What aggregation switch will be most appropiate, a MS425 (10Gb aggregation), using SPF+ ports as uplinks to the MXs (is this possible)? * Will it be a better idea to connect aal MS225 directly into the MXs using the SFP+ ports? Thank you very much for your help.

Meraki

Community

About JPScolar

JPScolar

Juan-Carlos Perez

Community Record

Badges

Three MS120-24P Switch configuration

MX Dynamic Routing

Re: How to Configure a DMZ on a MX100-HA

How to Configure a DMZ on a MX100-HA

Build a DMZ with a MX105-HA

Extendind the VPN to Azure - vMX + Azure Virtual Firewal + Azure Virtual...

Re: Using vMX at the Azure Cloud

Using vMX at the Azure Cloud

Re: Inventory of MX devices with Embedded LTE or CradlePoint Failover

Inventory of MX devices with Embedded LTE or CradlePoint Failover

Re: Wi-Fi Antenna Radiation Patterns ( Polar Diagrams)

Re: Wi-Fi Antenna Radiation Patterns ( Polar Diagrams)

Wi-Fi Antenna Radiation Patterns ( Polar Diagrams)

Client Firewall behind the MXs

Active and Failover WAN Link performance

Wi-Fi Heat Maps

Re: Spine-Leaf, Tier-3, or a Flat Switching Layer?

Re: Spine-Leaf, Tier-3, or a Flat Switching Layer?

Spine-Leaf, Tier-3, or a Flat Switching Layer?

Re: Inventory of MX devices with Embedded LTE or CradlePoint Failover