Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About harmankardon
harmankardon
Building a reputation
Member since Sep 12, 2021
Jun 11 2024
Community Record
77
Posts
41
Kudos
1
Solution
Badges
Mar 21 2022
3:32 AM
2 Kudos
For anyone on a MX67C/MX68C running into issues with integrated cellular and custom APN's, try upgrading to MX 17.6 firmware. I was running into lots of issues with the integrated cellular on older firmware: some devices I could not set a custom APN myself (had to be set on the backend by Meraki support), and none of my devices would seem to take the public static IP APN from our cellular carrier (would never get the assigned public IP, always got a CGNAT IP). After upgrading to MX 17.6, all of these issues went away. My understanding is that the cellular portion of the MX 17.x firmware is now the same as what is used in the MG line of products. In addition, there are a number of undocumented improvements in MX 17.x like: Eliminated that the flood of "events dropped" that appear in the event log on devices with integrated cellular modems even if the modem was disabled and there was no SIM installed. New Cellular Status tab on local status page. Ability to set APN from local status page. Ability to set APN username and password from local status page. Ability to set cellular IP type from local status page. If you aren't having any luck between Meraki support and your cellular provider, give MX 17.6 a shot.
... View more
Mar 19 2022
5:04 PM
Interesting, how were you able to exceed the 600 Mbps hard limit by such a significant amount? Also very surprised to see that you are seeing higher throughput numbers with security enabled vs. disabled, that doesn't seem to make sense. Either way, I re-tested again tonight and discovered that right after a reboot, I get 600 Mbps even with security features enabled. Some period of time later after doing some minimal browsing and cellular testing, I tried the speedtest again and I'm back to down to 275 Mbps. No change in the WAN connection, if I take the uplink cable out of the MX and plug it into laptop I get 1 Gbps. I rebooted the MX again and speeds went back up to 600 Mbps. Fortunately none of the sites I'll be deploying MX 17.6 to have anything greater than 200 Mbps so not an issue for now. Perhaps I'll just wait and see if this resolves as MX 17.x matures. Side note: each time I reboot the MX67C, when it comes back online it starts out on cellular for about 30 seconds (status light purple and confirmed via tracert) before switching to wired uplink.
... View more
Mar 19 2022
4:50 PM
I'm using Ookla and using my ISP's speedtest server, I have no trouble saturating the link if I bypass the MX67C. I tried nperf but closest server is almost 1000km away, not able to saturate even when bypassing the MX.
... View more
Mar 19 2022
11:29 AM
4 Kudos
According to the patch notes, AnyConnect support has been added for the MX64 and MX65 as of MX 17.6 firmware (currently listed as Stable Release Candidate):
... View more
Mar 18 2022
6:31 PM
1 Kudo
I've isolated it to Intrusion detection and prevention (SNORT) which isn't surprising, that feature is expected to reduce throughput. Meraki documentation does list 300 Mbps max for the MX67C when all security features are enabled, so I suppose I can't complain, although it doesn't really explain why 15.44 performed so much better with the same security configuration.
... View more
Mar 18 2022
6:18 PM
1 Kudo
Strange. When I configure mine that same as what you have there, I end up capped at 275 Mbps.
... View more
Mar 18 2022
6:02 PM
1 Kudo
If I disable AMP and Intrusion detection, I get 610 down and 775 up, so one of those features seems to have regressed perhaps. What do you have AMP/Intrusion set to?
... View more
Mar 18 2022
5:56 PM
1 Kudo
Good thought but its still IPv4 from what I can tell (IPv6 is disabled on VLAN and Addressing page and ran a packet capture to verify).
... View more
Mar 18 2022
5:43 PM
1 Kudo
I've been testing MX 17.6 firmware on a MX67C to take advantage of the several improved cellular features in 17.x and it looks promising but I happened to notice wired WAN throughput is around half of what it was on 15.44 (capping out around 275Mbps on a 1Gbps connection). I've checked the sliders on the SD-WAN page and they are set to 600 Mbps, I'm not expecting to get 600 but on 15.44 I was getting around 550 Mbps so 275 Mbps is a pretty noticeable drop. Anyone else seeing this? Is there anything I may be missing? A bit disappointing since the rest of 17.6 looks pretty good so far!
... View more
Mar 8 2022
12:56 PM
I should have added: In addition to the spokes only being allowed to communicate with the hub, we also want the hub to be able to communicate with the spokes. And my understanding of the hub-spoke model with Meraki is that even though the spokes don't create tunnels directly to each other, by default they can still communicate with each other via the hub. So it sounds like an allow "any to hq" rule is needed, as well as allow "hq to any" rule, and then a deny all which will block the spoke-to-spoke traffic?
... View more
Mar 8 2022
12:29 PM
Hi all, two questions regarding site-to-site VPN firewall: Question 1: I have 30 networks in the same dashboard organization with site-to-site VPN (Auto VPN) enabled in hub (mesh) mode at all locations. One location is "headquarters" and the other 29 are smaller remote locations. We'd like to change things so the remote locations cannot talk to each other and only talk with headquarters. To do that, I believe I have to change all the remote locations to Spoke mode instead of hub, and then implement outbound firewall rules to block traffic between the remote sites. Is there someway to write the rules so that hundreds of rules aren't required? Some sites are 192.168.x.x/24 and others are 10.x.x.x/24. Question 2: If IPv4 translation is enabled under VPN settings, should the above mentioned firewall rules be written using the translated subnets? Thanks!
... View more
Labels:
- Labels:
-
Auto VPN
Mar 7 2022
8:58 AM
Excellent, thanks for the update. We are running 1.11 on all our MG21 devices now, so far so good.
... View more
Feb 24 2022
2:27 PM
2 Kudos
I see MG 1.11 showing as stable release candidate now, thought it was showing as beta earlier but perhaps I got it mixed up. I had trouble getting a MG21 running 1.9 connected to cellular today, so decided to use safe mode to upgrade it to 1.11 as per your recommendation and it connected to cellular the moment the upgrade finished. Think I'll be sticking with 1.11 going forward, thanks @Ryan_Miles .
... View more
Feb 23 2022
8:16 AM
Thanks. Was the roll out part of a MX firmware release and if so, starting at which version?
... View more
Feb 23 2022
7:19 AM
Hi all, The dashboard tells me MG 1.9 is the latest stable firmware for MG21, released Dec 2019. That seems pretty old in the Meraki world. I see there is MG 1.11 beta available, released in Jun 17 2021, and that seems for a long time for firmware to be in beta. Does anyone have any experience with MG 1.9 firmware vs MG 1.11 firmware on the MG21? Wondering if that lack of a more recent beta version means that MG 1.11 is fairly stable and might go to stable RC at some point. We've had a few issues with MG units falling offline and/or not connecting (same cellular carrier used for all of our MG units), so I am considering trying MG 1.11, curious how others have made out with MG 1.11 firmware.
... View more
Feb 21 2022
6:32 PM
In trying to decide whether I need to investigate this further RMA these units, are there any situations where the management port is absolutely needed on Meraki switches? The management port on Cisco switches is something I would say is necessary, but I'm having trouble thinking of a scenario in which I'd absolutely need the management port on a Meraki switch. Seems like a factory reset and then re-connect to cloud for config would allow to recover from just about anything.
... View more
Feb 20 2022
3:51 PM
Was the throughput increase achieved solely through software and if so, what MX firmware version? Or was it achieved through hardware revision? Wondering if this applies to only newly purchased MX67/68 appliances.
... View more
Feb 17 2022
10:28 AM
Yes, no issues accessing the local status page using the LAN ports on the front, it's just the management port that doesn't seem to work.
... View more
Feb 16 2022
5:00 PM
Hi all, I have a MS120-24 and a MS120-24P and I can't seem to get the management port to work on either switch. I've tried connecting to the management port on both switches using a few different computers and cables without any luck. All of the computers and cables I've tested have no problem connecting to one of the LAN ports on the front of the switches. I've tried the management port with the switch both added and removed from a network, I've tried toggling the local status page enabled/disabled option under Network-wide -> General, I've tried factory reset multiple times. I called Meraki support and they were unsure of what the problem might be. Is there something I'm missing? I'm assuming the way it should work is that you plug into the management port and get an IP via DHCP, but that does not seem to be the case for me. Any insight would be appreciated.
... View more
Oct 12 2021
4:02 PM
Bump. Hoping someone has run into this before and knows the magic fix.
... View more
Oct 8 2021
5:53 AM
Hi all, We have deployed 15 of MX67C-NA with intent to use the integrated LTE modem for LTE failover. We have 15 SIM cards from Bell Canada that are all the same type of service. 14 SIM cards have all been installed and so far, 9 are working (under Cellular on the Uplink page, it shows Integrated Ready, fails over if WAN connection is unplugged) and 5 will not connect. For the 5 that won't connect, it shows that it's attempting to connect and sometime briefly shows signal strength but then just disappears and never shows "Ready". Signal strength is sufficient in those areas, the APN is set the same for all sites and all of the SIM cards work in my phone. I've tried re-seating SIM cards, power cycling (unplug power, wait 5 minutes, plug back in), tried different APN, tried removing APN altogether, but nothing seems to help. Anything else that I could try that I haven't tried yet? I have a support ticket open with both Meraki and Bell, and both sides are pointing fingers at the other.
... View more
Oct 1 2021
4:14 AM
@ZeeBoussaid Ouch, an RMA rate of 80% doesn't sound like fun. Roughly how long was it between receiving the initial "defective" units and receiving the replacement units? Did you do anything different in terms of configuration/setup with the 40 replacement units?
... View more
Sep 29 2021
4:14 AM
@ZeeBoussaid Can you give us an update on how things went for you?
... View more
Sep 12 2021
4:48 PM
@PhilipDAth your first suggestion was a good one but your second suggestion was a great one. Turns out I don't have the right credentials for the Linux box, but I can at least get to it now by adding a secondary IP to a Windows box I have remote access to at the same site. I didn't even know that was possible in Windows, thanks again for the tip.
... View more
- « Previous
- Next »
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 1146 | Oct 11 2022 10:23 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 12 | 1880 | |
| 4 | 2923 | |
| 3 | 4709 | |
| 3 | 862 | |
| 3 | 9586 |
© 2024 Cisco Systems, Inc.
