Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About LucL
Community Record
13
Posts
3
Kudos
0
Solutions
Badges
Aug 17 2023
2:21 AM
2 Kudos
Nice event ! Fight against cancer My username : Luem67
... View more
Aug 23 2022
5:37 AM
Does anyone know how to have access to the route log, if I can see something ? Luc
... View more
Aug 23 2022
5:36 AM
I have tried with a other computer, I got the same issue. I can't have access to the second site with the VPN. For your information, firewall are in MX.16.16.4 Luc
... View more
Aug 17 2022
8:06 AM
Oh yes I didn't see it Ok I will try this week-end at home and I will come back to you next week 🙂 Thank you for the response !
... View more
Aug 17 2022
7:27 AM
Hi @PhilipDAth , No, I don't see this route with the client VPN. Here is the route table for the site 2:
... View more
Aug 17 2022
5:23 AM
Hi @ww , Where do you see if it's split of full tunnel client ? I think full tunnel, but I don't see this option in the VPN Client / IPsec Settings webpage. For the Site-to-Site VPN, The Inbound firewall logging is Enable, but there are no rules in the Site-to-site outbound firewall.
... View more
Aug 17 2022
3:39 AM
Hello, I got some problem to configure my Client VNP to access to the second site on Site-to-Site VPN. The organisation is : Site 1 - Main site - configured in Hub (in Site-to-Site setting) IP : 192.168.111.0/24 and 192.168.110.0/24 Site 2 - Second site - configured in Spoke (in Site-to-Site setting) IP : 192.168.113.0/24 The Client VPN is configured on the Site 1. I have access to the Site 1 with my VPN Client. But I don't have access to the Site 2. I don't really want to configure a new VPN Client on Site 2, I would like to prefer if the VPN Client from Site 1 have access to Site 2. On the Site-to-Site setting in the Site 1, I have approved the Client VPN in VPN mode. On the Site-to-Site setting in the Site 2, I have this : Does anyone have a suggest ? Thank you Luc
... View more
Apr 13 2022
11:55 PM
Hello @mwiater , @cmr , Sorry for my late answer, I made some tests yesterday evening, and I updated the software to 16.16.1. My problem comes back again, the ERP application didn't work again. And you are right @mwiater , the problem comes from the layer 7 rules. I deleted all rules, and the ERP is working now fine with the version 16.16 and later. Maybe meraki's team changed something in the way to inspects the payload of packets for the layer 7 rules, and now this tool is more aggressive. But now what is the best ? Make the rollback to 15.44 and use layer 7 rules, or use the last version 16.16.1 with no layer 7 rules ?...
... View more
Mar 14 2022
7:25 AM
Hi @mwiater, Yes, that's a possibility if they changed something in the MX update. So did you turn traffic analysis off for the all network? I will try it when I make the update again. Thank you, Luc
... View more
Mar 14 2022
7:20 AM
Hi @cmr, I didn't apply any FW rules for the VPN SD-WAN. We have an Enterprise licensing. The load of MXs are good (less than 50% of the capacity of the line). I have two WAN links on each site. In Uplink selection, the active-active autoVPN is enable. but in SD-WAN policies, I preferred one link, and failover if the link is down. I didn't tried anything else, because the site B can not work when I had the problem. So I only rollback the two MX. Maybe it's one thing to do after. Thank you for your response.
... View more
Mar 11 2022
3:44 AM
Hello community, We have 2 sites (A and B) separated by 15 km and we have two MX68, one on each site. We use the VPN site-to-site for connect the IT between the both sites. I have upgraded the firmware on the both MX68 from MX 15.44 to MW16.16. But I had to make a rollback because one application (the ERP) lose some packet. After the rollack, the ERP is working well again. The configuration is : The ERP server is based on the site A. And clients (computer or mobile device) are on site A and on site B. When I had the problem, clients from the site B, couldn't connect to the server on site A. The ERP client has said that it can not connect to the server (server don't respond). But the problem was strange, with some client the ERP was working, and with other, the ERP was not working. I don't know if the firmware update block some ports or packets. For the moment, i only know that the ERP use these ports : Socket IP Divalto: 1246 Xlan:1235 SQL- ADO.net: 1433 Browser SQL: 1434 I am investigating too with the ERP supplier, but he has never seen that. If someone has more information about the firmware update. Thank you, Luc
... View more
Aug 30 2021
8:33 AM
1 Kudo
Thank you for your answer ! I think you are right, so I followed the solution of @ww . Luc
... View more
Aug 30 2021
7:33 AM
Hello, I have 3 switch MS250 which are Physical Stack on the back and one firewall MX68. I would like to create an aggregation between the 3 MS250 and the MX68. So I use the first port of the first MS250 which is connected to the 3th port of the MX68. Then the first port of the second MS250 is connected to the 4th port of the MX68. And for finish, the first port of the third MS250 is connected to the 5th port of the MX68. And I have create an aggregation group with the 3 ports (the 1st port of each MS250). But If I connect the 3 cables to the MS68, the 3 switch will lose the connection. I need to disconnect 2 cable and keep only 1, so the link is working. If someone can tell my what is wrong ? Thank you, Luc
... View more
Labels:
- Labels:
-
Layer 3
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 4841 | |
| 1 | 2093 |
© 2024 Cisco Systems, Inc.
