Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About harmankardon
harmankardon
Getting noticed
Member since Sep 12, 2021
01-24-2023
Community Record
61
Posts
26
Kudos
1
Solution
Badges
03-28-2022
05:44 AM
Interesting. In terms of minimizing downtime this seems like the best solution. Allows me to fully configure the destination network before having to move devices or licenses. Any gotchas you can think of with this method?
... View more
03-25-2022
11:49 AM
I thought this was the case as well, but the support engineer I spoke with said all they can do is help move devices/licenses, nothing regarding configuration.
... View more
03-25-2022
11:48 AM
I'll have a look at this, thanks.
... View more
03-25-2022
10:30 AM
What is the best way to move a network from one organization to another? I know that licenses and devices can be easily moved, but is there a way to move a whole network? I'm not even sure how I'd do it manually by re-creating the network in the destination organization. With a switch for example, I can't configure individual ports until the switch is present in the new network, but if I move it to the new network then I lose the ability to see what it's configuration was in the old network. Do I have to manually document every single bit of device configuration on the existing network before I start moving devices? I'm thinking this would lead to a lot of downtime. I may have to do this for several networks, hoping to find some way to automate or at least avoid the potential for human error.
... View more
03-24-2022
10:16 AM
I was seeing Profile Not Found immediately after upload and after refreshing the page. Checked again today after the dashboard maintenance and looks like its fixed now. Thanks for the clarification on the .XML extension, that confused me when I was checking the local Profile folder on my computer to see if the profile actually got pushed.
... View more
03-23-2022
05:18 PM
Thanks @Ryan_Miles !
... View more
03-23-2022
05:08 PM
When I upload a profile in the Profile Update section of the AnyConnect settings page, any profile I upload (created with the AnyConnect VPN Profile Editor) shows "(No Profile Found)". After spending some time trying to figure out what was wrong with my profile, I decided to try connecting and the profile was actually pushed and seemed to work. Am I safe to assume this is just a bug in the dashboard user interface?
... View more
03-23-2022
02:53 PM
We use PoE injectors so there’s just single Ethernet run to the MG. Some people will run two Ethernet lines to the MG, one for data plugged into WAN of MX, and one for power plugged into a non-WAN PoE port on either the MX or a switch (and then configure the PoE port to drop all traffic).
... View more
03-23-2022
11:30 AM
Is sorting by Usage on the Network-wide -> Clients page not working properly for anyone else? I've tried a few different time periods on multiple networks and multiple organizations, and in every situation, sorting clients by Usage results in a list that is not sorted by usage (haven't figured out what its actually sorting by).
... View more
03-22-2022
09:45 AM
1 Kudo
Also having trouble with this, L7 peer-to-peer is blocking our remote support tool.
... View more
03-21-2022
03:32 AM
2 Kudos
For anyone on a MX67C/MX68C running into issues with integrated cellular and custom APN's, try upgrading to MX 17.6 firmware. I was running into lots of issues with the integrated cellular on older firmware: some devices I could not set a custom APN myself (had to be set on the backend by Meraki support), and none of my devices would seem to take the public static IP APN from our cellular carrier (would never get the assigned public IP, always got a CGNAT IP). After upgrading to MX 17.6, all of these issues went away. My understanding is that the cellular portion of the MX 17.x firmware is now the same as what is used in the MG line of products. In addition, there are a number of undocumented improvements in MX 17.x like: Eliminated that the flood of "events dropped" that appear in the event log on devices with integrated cellular modems even if the modem was disabled and there was no SIM installed. New Cellular Status tab on local status page. Ability to set APN from local status page. Ability to set APN username and password from local status page. Ability to set cellular IP type from local status page. If you aren't having any luck between Meraki support and your cellular provider, give MX 17.6 a shot.
... View more
03-19-2022
05:04 PM
Interesting, how were you able to exceed the 600 Mbps hard limit by such a significant amount? Also very surprised to see that you are seeing higher throughput numbers with security enabled vs. disabled, that doesn't seem to make sense. Either way, I re-tested again tonight and discovered that right after a reboot, I get 600 Mbps even with security features enabled. Some period of time later after doing some minimal browsing and cellular testing, I tried the speedtest again and I'm back to down to 275 Mbps. No change in the WAN connection, if I take the uplink cable out of the MX and plug it into laptop I get 1 Gbps. I rebooted the MX again and speeds went back up to 600 Mbps. Fortunately none of the sites I'll be deploying MX 17.6 to have anything greater than 200 Mbps so not an issue for now. Perhaps I'll just wait and see if this resolves as MX 17.x matures. Side note: each time I reboot the MX67C, when it comes back online it starts out on cellular for about 30 seconds (status light purple and confirmed via tracert) before switching to wired uplink.
... View more
03-19-2022
04:50 PM
I'm using Ookla and using my ISP's speedtest server, I have no trouble saturating the link if I bypass the MX67C. I tried nperf but closest server is almost 1000km away, not able to saturate even when bypassing the MX.
... View more
03-19-2022
11:29 AM
4 Kudos
According to the patch notes, AnyConnect support has been added for the MX64 and MX65 as of MX 17.6 firmware (currently listed as Stable Release Candidate):
... View more
03-18-2022
06:31 PM
1 Kudo
I've isolated it to Intrusion detection and prevention (SNORT) which isn't surprising, that feature is expected to reduce throughput. Meraki documentation does list 300 Mbps max for the MX67C when all security features are enabled, so I suppose I can't complain, although it doesn't really explain why 15.44 performed so much better with the same security configuration.
... View more
03-18-2022
06:18 PM
1 Kudo
Strange. When I configure mine that same as what you have there, I end up capped at 275 Mbps.
... View more
03-18-2022
06:02 PM
1 Kudo
If I disable AMP and Intrusion detection, I get 610 down and 775 up, so one of those features seems to have regressed perhaps. What do you have AMP/Intrusion set to?
... View more
03-18-2022
05:56 PM
1 Kudo
Good thought but its still IPv4 from what I can tell (IPv6 is disabled on VLAN and Addressing page and ran a packet capture to verify).
... View more
03-18-2022
05:43 PM
1 Kudo
I've been testing MX 17.6 firmware on a MX67C to take advantage of the several improved cellular features in 17.x and it looks promising but I happened to notice wired WAN throughput is around half of what it was on 15.44 (capping out around 275Mbps on a 1Gbps connection). I've checked the sliders on the SD-WAN page and they are set to 600 Mbps, I'm not expecting to get 600 but on 15.44 I was getting around 550 Mbps so 275 Mbps is a pretty noticeable drop. Anyone else seeing this? Is there anything I may be missing? A bit disappointing since the rest of 17.6 looks pretty good so far!
... View more
03-08-2022
12:56 PM
I should have added: In addition to the spokes only being allowed to communicate with the hub, we also want the hub to be able to communicate with the spokes. And my understanding of the hub-spoke model with Meraki is that even though the spokes don't create tunnels directly to each other, by default they can still communicate with each other via the hub. So it sounds like an allow "any to hq" rule is needed, as well as allow "hq to any" rule, and then a deny all which will block the spoke-to-spoke traffic?
... View more
03-08-2022
12:29 PM
Hi all, two questions regarding site-to-site VPN firewall: Question 1: I have 30 networks in the same dashboard organization with site-to-site VPN (Auto VPN) enabled in hub (mesh) mode at all locations. One location is "headquarters" and the other 29 are smaller remote locations. We'd like to change things so the remote locations cannot talk to each other and only talk with headquarters. To do that, I believe I have to change all the remote locations to Spoke mode instead of hub, and then implement outbound firewall rules to block traffic between the remote sites. Is there someway to write the rules so that hundreds of rules aren't required? Some sites are 192.168.x.x/24 and others are 10.x.x.x/24. Question 2: If IPv4 translation is enabled under VPN settings, should the above mentioned firewall rules be written using the translated subnets? Thanks!
... View more
Labels:
- Labels:
-
Auto VPN
03-07-2022
08:58 AM
Excellent, thanks for the update. We are running 1.11 on all our MG21 devices now, so far so good.
... View more
02-24-2022
02:27 PM
2 Kudos
I see MG 1.11 showing as stable release candidate now, thought it was showing as beta earlier but perhaps I got it mixed up. I had trouble getting a MG21 running 1.9 connected to cellular today, so decided to use safe mode to upgrade it to 1.11 as per your recommendation and it connected to cellular the moment the upgrade finished. Think I'll be sticking with 1.11 going forward, thanks @Ryan_Miles .
... View more
02-23-2022
08:16 AM
Thanks. Was the roll out part of a MX firmware release and if so, starting at which version?
... View more
- « Previous
-
- 1
- 2
- Next »
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 236 | 10-11-2022 10:23 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 4 | 1041 | |
| 3 | 1484 | |
| 3 | 430 | |
| 3 | 4463 | |
| 2 | 236 |
