Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Chazz
Chazz
Just browsing
Member since Jul 14, 2021
Jul 14 2021
Community Record
5
Posts
0
Kudos
0
Solutions
Badges
Jul 14 2021
3:21 PM
So I am somewhat screwed then, I guess. The Meraki is owned by our ISP and that's all the access we have; I don't know even if I can trigger a firmware update at this point, not being admin. For what it's worth, I've set up port forwarding with other firewalls, and it has just worked; I can SSH into a number of different systems from here, so I know that my end of the setup is functional. And I've connected via SSH from in house, from a machine connected to the wired private network. It's only traversing the Meraki that is being problematic. I guess I have to go pay the ISP for a TS call on this now...
... View more
Jul 14 2021
2:59 PM
Alas, I don't have that option. Under Network-wide / Monitor, I have only Clients, Summary Report, and Map & Floor Plans.
... View more
Jul 14 2021
2:47 PM
It it possible to tell an MX84 (firmware 14.34) to capture WAN packets? I mean, I can pull up a copy of Wireshark, but then I have to disrupt the client's internet while I patch that machine in... makes things a whole lot easier if I can just tell the appliance to show me those packets.
... View more
Jul 14 2021
1:53 PM
I don't know if I can, I may be too new here to include files. But if it works, here's the forwarding rules: The IP ranges for the VLANs are 192.168.100.0/24 for VLAN 1 (Management), 10.3.1.1/24 for VLAN 10 (Private), 192.168.50.0/23 for 50 (Guest), and 192.168.75.0/24 for 15 (DMZ / Phones). As you can see, the specific address I'm trying to connect to is 10.3.1.107, in VLAN 10. My current address is in the image, and while I don't really want to reveal my client's IP, they're a 70.x.x.x address, so I am trying to connect from an outside address.
... View more
Jul 14 2021
1:21 PM
I have an MX84 set up with 4 VLANs: #1 for management, 10 "private" for wired hardware, 50 "guest" for the wireless guest network, and 75 for the "dmz" VOIP phones. Each VLAN has a disjoint range of IP addresses and its own DHCP server. There are firewall rules in the Meraki that prevent packets from traversing from one VLAN to another; the VLANs are set up by hardware port. What I want to do is connect an SSH session from outside to a specific machine on the private VLAN, and I set up a port forward to do that: TCP and UDP packets from my address and port 22 are forwarded to the specific machine I want to connect to, also port 22. The problem is that they don't seem to get there. I'm unsure how to tag a session as belonging to VLAN 10 from outside, but the target machine is in VLAN 10 and I am specifying its address. I believe the modem in front of the Meraki is transparent; the Meraki's external IP is routable, and I do have control over its settings from outside. Any suggestion as to what I might be overlooking?
... View more
© 2024 Cisco Systems, Inc.
