Meraki

MariamT · ‎Jan 3 2024

Thank you @DarrenOC , I'll send that link to the client and see what we'll get .

MariamT · ‎Jan 3 2024

Hello everyone , My client uses Cisco Webex softphone on his Lan machines . I have opened the ports : 1) 5062,8934,6970 TCP 2) 5004,9000 , 8500-8700 UDP 3) SIP : 5060-5070 TCP . But the client can't make calls , but it works when he switchs to his mobile connection . Do you think there may be other ports that I should open on the Firewall rules ?? P.S : the ports 443 , 80 , 53 , 123 are also opened . Thank you .

MariamT · ‎Oct 23 2023

Hello All, Thank you for your answers/Questions in order to help me troubleshoot . The issue has been detected as part of Microsoft Windows 11 OS , the slowness was only raised to us by WIN11 users once the native VPN is active . There's no clue to help resolve this , except to unistall some windows KB updates ( seen on Internet) . to this day , Microsoft hasn't deployed a corrective patch to this issue . Have a good day 🙂 !!

MariamT · ‎Aug 10 2023

Hello all, One of our clients reported that internet connection gets so slow when users are connected via Client VPN . I checked on the dashboard and there's no bandwidth limit on users . If it was only one person facing this issue I would say that it's an issue from their own Internet acess , but since it's a major issue , I want to see if there's something I can do from my side . Can you please advise me of the troublshoot I should do ? Thanks in advance .

MariamT · ‎Jun 16 2023

Hello all, I am installing Meraki MX85 on 5 sites , a hub site and 4 spokes . On one spoke I have a website on a LAN server , to get to this website from the internet , the request is first sent to the hub where there's a fortinet FW (That will be replaced by an MX85) , this FW send the request to the spoke site via a redirecting rule . My client want to keep the same configuration : to get to the website hosted on a lan server of the spoke , requests should be sent to the HUB ( MX 85 ) and then from the hub the request is sent via SD-WAN to the spoke. I tried to add a Nat rule but it's not working as the subnet of that server isn't declared on the hub . Does anyone have an idea of how I can route traffic sent to this spoke site via SD-WAN please? Thanks .

MariamT · ‎Jun 15 2023

Hello all, I am installing Meraki MX85 on 5 sites , a hub site and 4 spokes . On one spoke I have a website on a LAN server , to get to this website from the internet , the request is first sent to the hub where there's a fortinet FW (That will be replaced by an MX85) , this FW send the request to the spoke site via a redirecting rule . My client want to keep the same configuration : to get to the website hosted on a lan server of the spoke , requests should be sent to the HUB ( MX 85 ) and then from the hub the request is sent via SD-WAN to the spoke. I tried to add a Nat rule but it's not working as the subnet of that server isn't declared on the hub . Does anyone have an idea of how I can route traffic sent to this spoke site via SD-WAN please? Thanks .

MariamT · ‎May 3 2023

Hello All, I have a stupid question but I'm having doubts about it. I have full admin acces on 2 organizations and I need to move a license from an org to another . Would I only have to click on "move" next to the licence key or is there another way to do it ? Thanks .

MariamT · ‎Mar 6 2023

ooh ok thank you , I'll try that again . I'v been getting this message saying that the route overlaps with a vlan on the MX . Thank you for your time and support 🙂 !!

MariamT · ‎Mar 6 2023

he has many routes to remote sites /24 using this nexthop. the 192.168.1.250 is used by another router on the LAN that has the vpn solution on it . and the LAN of this site is also 192.168.1.0/24 , so When Meraki wants to create the route sees that the next hop belong to the LAN and then can't validate it .

MariamT · ‎Mar 6 2023

Hello everyone, I have a client using an internet box with a dedicated public IP address , and in order to connect to his remote sites, he uses a VPN solution on another router on his LAN . I will be replacing the first BOX with a new ISP BOX and a meraki MX85 . in the current situation, my client LAN subnet is 192.168.1.0/24 so to connect to the remote sites he directs all traffic to the router on the LAN , via next hop 192.168.1.250/24. the issue is that have to put the same old config as it is on the MX . LAN Subnet 192.168.1.0/24 and static routes with the 192.168.1.250/24 as next hop . but this is not possible since the Meraki sees the Next hop in the LAN and doesn't allow the creation of the routes. Is there any way I can overcome this without changing the next hop on that router on the LAN and without changing the LAN subnet on the MX ? Thank you in advance .

MariamT · ‎Feb 27 2023

Hello , Can anyone please help me understand this , I'm a little confused about how Meraki MX routes Internet traffic to a third party vpn ( ex: Zscaler ) . Do we add a rule or a static route to force all internet traffic to go through this tunnel ? knowing that by default if the Load-balancing is disabled on the MX all internet traffic uses the primary uplink . Thanks in advance 🙂 !!

MariamT · ‎Feb 16 2023

Hello , I suggest that you create a new network in the dashboard just to add the new MX . and then connect both MXs to one switch , and in the switch create 2 vlans , one Vlan would be redirected the the Old Mx and the second to the new one . but for management purposes your new MX needs to have internet access so try blocking everything on l3 rules except the Meraki flows .

MariamT · ‎Jan 18 2023

Hello Meraki community, See if anyone can help me please , I have a question regarding client VPN configuration , if an MX with a main line WAN1 and a 4G backup router and the client VPN on the users PC is configured with the Mx hostname (not the MX public IP) . would the client VPN tunnel still be working on the 4G backup line if the wan1 is down ? Thank you in advance .

Meraki

Community

About MariamT

MariamT

Mariam Tissir

Community Record

Badges

Re: MX85 Firewall Rules

MX85 Firewall Rules

Re: Client VPN bandwidth

Client VPN bandwidth

Redirection to a spoke site

NAT and redirection to a branche site

moving license to another ORG

Re: Vlan overlaps with static route

Re: Vlan overlaps with static route

Vlan overlaps with static route

Third party VPN

Re: 2 MXs on a Network

client VPN on 4G backup line

Re: MX85 Firewall Rules

Re: Client VPN bandwidth