Meraki

Stephen_K · ‎Dec 5 2023

Not as big a job as some, but this was kind of fun. I do wonder how to deal with the MS120/250 24 port switches. Have not seen a patch panel that is only on the right.

CarolineS · ‎Nov 30 2023

Hooray! We have some new Visio shapes! These were a side project of a Meraki employee, @DrDray - so they're not in the official Visio .zip file on cisco.com but.... take a look! https://community.meraki.com/t5/Dashboard-Administration/Meraki-SVGs-Visio-LucidChart-Stencils/m-p/215661

sdombrosky · ‎Sep 1 2020

+1 to this feature request. Submitted a wish as well.

CptnCrnch · ‎Jan 16 2020

Depends on what your threat vector looks like: Your‘re trying to narrow down the possibility to reach your systems from countries not supposed to hit your systems. This of course will prevent automated scanning etc. (which adds a little bit of security) and prevent your logs from being filled up with garbage mostly. Nash‘s very valid point on the other hand is: if somebody from one of countries you‘re blocking is really up to something, he / she / it will simply make sure the connections are coming from some other country, most likely the one you‘re residing in. Guess it‘d add way more security would be to have the systems open to the internet as secured as possible, cause after all this is what‘s preferable nonetheless.

Joel-McGowan · ‎Oct 30 2019

This Might help I ran into a problem using the meraki authentication with the vpn client. Had to change the registry setting below to 1. Mapped drives where authenticating with the meraki credentials instead of the domain. Might not apply here but its worth a shot. 1.) You can set the value of the following key to 1, Hkey_Local_Machine\System\CurrentControlSet\Control\Lsa\DisableDomainCreds. This turns off the caching off credentials and forces your domain credentials to be used when accessing resources on both the local and remote network. https://www.reddit.com/r/meraki/comments/4w07gu/meraki_mx84_client_vpn_cannot_connect_to_mapped/

Tetsuovpn · ‎Jun 9 2019

the team was discharged, but we can not access it anymore because it asks for a username and password which we do not have and if we try to add it to a new account it tells me that it is already in use

BlakeRichardson · ‎Apr 2 2019

I've had this issues at home on my MX running older firmware, I mianly notice it blocks Steam downloads. The first time it happened I spent a good hour trying to work out what was wrong.

MeredithW · ‎Mar 7 2019

In recent community housekeeping efforts, we are started this new board for introductions.

RH6379 · ‎Dec 12 2018

We swapped out our MX84's for MX100's and it happened with 2 MX100's in an HA configuration. Meraki does not recommend a direct connection for heartbeats between the 2 MX devices any longer. We now have 2 MX100 devices with the HA one powered off. This is ridiculous.

mel-astrosat · ‎Oct 22 2018

Hi NSGuru. Thanks for responding I really appreciate it. We currently only have one site to site VPN and it is a non-Meraki end type. I have sent a reply to PhilipDath with a screen shot of the customised settings on the site to site phase 1 & 2 configs. On the principle of KISS (Keep It Simple Stupid) I am debating with my AWS expert that we should use the AWS off the shelf product. I think he is coming round to the idea. That way we can run with the Meraki AWS template Thanks Again.

ArpTableCorrupt · ‎Oct 8 2018

Want to Have Internet failover so if Site B's Cable Modem goes down, the Internet Connection can be routed through Site A using a 1GB Point To Point Fiber L2 Connection. I've read above solution on how to accomplish this using a LAN Connection on Site A to the WAN Connection on Site B I have Qnap's on both ends that I want to Synchronize (Rsync) at night after Backups complete, but will easily be instantly capped on the 500MBps limit on the MX84 at the backup site. Would like to see if there is an alternate way to accomplish this so I can take advantage of the full 1GB link on the PTP connection using only LAN ports on the MX's.

jdsilva · ‎Sep 25 2018

OK, confirmed. A Layer 3 outbound firewall rule does not block the return traffic to an inbound initiated flow. Good. I can sleep easy at night again 🙂

PhilipDAth · ‎Sep 17 2018

So if you have a failover do you manually update the external DNS for people to get to the servers?

LRH · ‎Sep 12 2018

Yes, I have a case open....was submitted to development....

HTS · ‎Sep 12 2018

This looks like it would accomplish what we want. I'll give this a try. Thank you.

NSGuru · ‎Sep 12 2018

It sounds like your best option if your MX is also acting as your switch is to do the following. Enable VLANs under routing of the addressing and vlans tab. (Make sure the current vlan is still setup properly afterwards, Check DHCP and make sure it is proper as it was before also.) Create a new VLAN/Subnet for this specific device. Change the interface that the device is connected to and give it the native VLAN of the new VLAN you have just setup. Setup DHCP also so the device grabs proper IP and DNS. After this and the device is up and working properly... You can then go into firewall rules and create rules to block the device/subnet from communicating to the other devices/subnet that you are trying to achieve.

NSGuru · ‎Sep 12 2018

Hi All, Not sure if this should go under Security or Network-Wide but im interested to see if anyone else has worked with Meraki on source based routing out through a VPN tunnel yet. (send specific subnet through IPsec VPN and out the other sites internet) Weve tried Spoke to Hub with default route to other network and it works great. (This is being used so that our clients phones keep the same public address so once an WAN outage occurs the VPN tunnel comes back up immediately on secondary circuit and allows the phones to continue going out using the same public IP address stopping the phone from having to re-register after 5 minutes.) Ive discussed with Meraki and it is possible to do source routing but they state it is in beta mode and we the administrators do not have the ability to program any of this as it is all done on the back end with a newer version firmware. My point to this is... Has anyone else tried this yet? Did it go well were there any struggles?

dmac · ‎Apr 23 2018

Thanks! I will give this a shot.

Uberseehandel · ‎Apr 19 2018

@PhilipDAth wrote: Maybe Caroline would make it like the "Make a Wish" feature on the new Meraki Insight product (that is satire). ps. Here is a screenshot in case you have not seen this. Perhaps Meraki should run a competition. If a customer actually figures out how to make a wish for Meraki Insight they get a free pair of glasses. Go on, look really hard, and you'll eventually figure out how to make a wish. @PhilipDAth wrote: Maybe Caroline would make it like the "Make a Wish" feature on the new Meraki Insight product (that is satire). ps. Here is a screenshot in case you have not seen this. Perhaps Meraki should run a competition. If a customer actually figures out how to make a wish for Meraki Insight they get a free pair of glasses. Go on, look really hard, and you'll eventually figure out how to make a wish. Just beneath Report a map error - (43" monitor). I need a new prescription

PhilipDAth · ‎Apr 18 2018

Sometimes they get stuck in a firmware upgraded loop. It is not very obvious when this happens (except they use a lot of bandwidth 24x7). Perhaps whatever loop it got itself into it has now managed to sort out.

PhilipDAth · ‎Apr 18 2018

We seem to have had @Zach's question hi-jacked (nicely) and now have two separate issues in the one thread. Back to @Zach's issue. 9.1(2) is an "early deployment" release of the ASA code. The current "gold star" release is asa917-25-k8.bin. Is it possible to upgrade the ASA to this "gold star" release? https://software.cisco.com/download/home/279916854/type/280775065/release/9.1.7%20Interim

Tyson1 · ‎Apr 17 2018

Small Branch MX64

svk253 · ‎Apr 17 2018

There was an audit comment last year that pointed out that we did not physically separate our wireless networks, and suggested we do so. We have accepted the 'risk' as an organization to use VLANs (I know...), but it is usually something that is brought up often.

Hien_Doan · ‎Apr 17 2018

I agree with you that all browser are unpredictable. I keep all 3 browsers, IE, Chrome and Firefox. As in this case Firefox works but not Chrome but once Firefox unlocks something I now can use Chrome to edit the location for the new switches. Thank you all for your suggestions!

netstart · ‎Apr 14 2018

This is very simple setup. All these are wired connections. Standard desktops nothing fancy. MX64 is acting as DHCP server Could it be a bug?

Meraki

Community

About NSGuru

NSGuru

Community Record

Badges

Re: Before and After Pictures

Re: Visio Shapes

Re: Security Appliance Layer 7 Firewall Rules

Re: Layer 7 Allows rules Meraki MX appliances

Re: Outlook prompts for password repeatedly over VPN client

Re: MERAKI Z1

Re: AMP causes strange issues

Re: Please introduce yourself

Re: Broadcast Storm Brought Down Entire MS120 Network

Re: Non-Meraki / Client VPN entries in event log

Re: Internet failover to point-to-point?

Re: Inbound Firewall Rules please

Re: Data center Fail over

Re: Content Filtering

Re: Z3 throughput / disable FW

Re: Device Policy - Blocked on MX

Beta version source IPsec tunneling question (Meraki support programming on...

Re: restricting viewing privileges to a specific computer

Re: If there was one thing you could change here on the Meraki Community, w...

Re: MR33 always says "Unable to fetch configuration"

Re: Site to Site VPN (Meraki to ASA 5510)

Re: Watch data From port 2 to port 1 Like normal Wan works.

Re: Public Wifi Setup - best method for our situation?

Re: Device Address/Location

Re: Ports appearing multiple times with same IP address MX64, What is causi...

Re: Visio Shapes

Re: help date licence mx100

Re: Non-Meraki / Client VPN entries in event log

Re: Inbound Firewall Rules please

Re: Broadcast Storm Brought Down Entire MS120 Network