Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About Dunky
Community Record
16
Posts
4
Kudos
1
Solution
Badges
Wednesday
2 Kudos
Thanks @Bruce Its nice to have confirmation that someone else sees the exact same issue 🙂 This is a bit of a show stopper for us. If the non-Meraki peer (Azure) had a vMX, could I apply L3 outbound rules there to prevent the traffic arriving at the onsite MX in the first place?
... View more
Wednesday
Hi Alex, Thank you for taking the time to reply. That is not the case - I have a rule that permits the return traffic outbound, followed by a deny any any from the local subnet to the remote subnet but incoming traffic on any port is still reaching the local subnet. Here is what I have (10.223.104.32/27 is the remote (non-Meraki peer) subnet and 10.222.109.9 is a host on a local VLAN): The rules should prevent incoming traffic to port 80 on 10.222.109.9, but they don't - I think its only checking the rules on outbound initiated connections, and not return traffic for already established inbound connections. So, in the above config, how do I permit the inbound traffic I want whilst denying all other inbound?
... View more
Tuesday
I have a site-site VPN established with a non-Meraki peer. I need to be able to only permit specific traffic into the MX site from the remote end. I cannot see a way to achieve this is it bypasses the L3 rules and the rules applied on the site-site VPN are only outbound. Example: Remote subnet 10.1.1.0/24 Local (on MX) device 10.2.2.2/32 I want to permit incoming traffic from 10.1.1.0/24 to 10.2.2.2/32 on port 80 and deny all other traffic. How do I achieve this?
... View more
a week ago
Update - looks like this may do the tick - will give it a go as soon as I get the chance and report back. SITE-TO-SITE VPN FROM CISCO MERAKI TO AZURE AND VEEAM BACKUP COPY TO AZURE – PART 1 #AZURE #MVPHOUR #CISCO #MERAKI #VEEAM | CheckYourLogs.Net
... View more
a week ago
Yes, doesn't work. Give the error I mentioned when try to same it - no Hubs.
... View more
a week ago
Is anyone able to point me to some documentation that is current? The Azure end is configured we think. If I go to Security & SD-WAN>Site-Site VPN and set type to Spoke, I can then enter the Non-Meraki VPN peers under the Organization-wide settings. When I click on Save at the end though it wont allow me to save as there is no hub. All we are trying to do is create a site-site VPN to allow specific subnets in Azure to access onsite resources behind the MX subject to L3 rules on the MX. Is there an Idiots Guide to configuring this? TIA
... View more
2 weeks ago
Yeah, a separate network per VMX is what I was leaning towards. If we cant create a security appliance network and put a dozen VMX's in it then I guess a network per VMX it will have to be - just would have been nice to create one network with them all in to aid in navigation and keep the number of networks to a minimum. Cheers
... View more
2 weeks ago
I am seeking some advice on Best Practice in setting up multiple VMX's. I have a need to create a number of vMX's in Azure. Each will have VPN's to different sites (1 combined network/site in the dashboard) What is the best way to add these to the dashboard? - A single network for the vMX's and put them all in there - Add the VMX to an existing dashboard network (network is a combined network for a location) - Create multiple networks for the Azure locations and put the relevant VMX's in these TIA
... View more
2 weeks ago
Thank you for the reply. I can see on the MR36 datasheet: 20 and 40 MHz channels (802.11n); 20, 40, and 80 MHz channels (802.11ac Wave 2); 20, 40 and 80 MHz channels (802.11ax) So I guess it like people say, the graph is very misleading.
... View more
3 weeks ago
1 Kudo
I appreciate this is an old post, but it has had some recent replies. You are aware that the Cisco AnyConnect VPN client is now supported? Not used it myself (have an MX64 at the one site we have client VPN and the MX64 has to the use the native MS client).
... View more
3 weeks ago
So if I have a client showing this: with a channel width of 160MHz: is the low Data Rate that that s being shown something I should be concerned about, or is the information in the dashboard wrong?
... View more
3 weeks ago
Thanks for the reply Philip. I will change that as soon as I get the chance. Would that then allow the clients to operate at Data Rates >50% of the client max? I'm interested to understand how changing the minimum support would cause the others to run at a higher rate?
... View more
3 weeks ago
"We use GPO to set the right DSCP values on teams traffic and we are also setting the DSCP bits when teams traffic enters the access switch or any WIFI AP." I would be very interested in knowing how you identify the Teams traffic on the AP and switches, as this is something I will need to do shortly. Does Teams not set the DSCP so all you have to do is trust it?
... View more
3 weeks ago
1 Kudo
I am getting email alerts when a monitored app shows degraded performance as below: But I never get a subsequent email saying the situation is cleared. Should I be?
... View more
3 weeks ago
All our clients connected to the MR36's show a low Data Rate as % of client max: The above is for one client I selected at random. I have never seen any above 50% In Wireless>Access Control, I have the following settings: All the clients are Windows 10. Is this normal? I am curious as to why this is not closer to 100% of the client max. Thanks in advance Steve
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 64 | a week ago |
My Top Kudoed Posts
