Meraki

IvanJukic · ‎Jul 8 2024

Hi @Obiwan_3011 , If you dial in, does that work or the same? If calls connects ok and you get silence. Most likely the RTP streams are being blocked or dropped. So, double check for things like (1:1 NAT, port forwarding, etc) on the Firewall. Also where is the PBX/Platform hosted locally, remote site or in the Cloud?

IvanJukic · ‎Jul 8 2024

Hi @MisG, As others have mentioned, that cable should be fine. I just wanted to share the stacking guide, as reference, when you are ready to Stack them. Also, if you are planning on stacking two switches togather, you'll need a minimum of 2 stacking cables. This is to ensure a full daisy-chain configuration. https://documentation.meraki.com/MS/Stacking/Switch_Stacks#Configuring_a_Physical_Switch_Stack

IvanJukic · ‎Jul 8 2024

Hi @Martinsen , As @PhilipDAth has mentioned. The best option is to check the local status page on the switch. If all ok, then factory reset them.

IvanJukic · ‎Jul 4 2024

No problem at all @van604 ... It is fairly new feature and sometimes I forget it is there. But when I do remember, it saves me a lot of time, going through pcaps & logs.

IvanJukic · ‎Jul 4 2024

Hi @ITGOOKULAMKMK Thanks for letting me know. So if the call connects and you get silence. Most likely the RTP streams (it carries the audio) are being blocked or dropped. So, check for things like (1:1 NAT, port forwarding, etc) on the Firewall. Also, have your team check the logs on the PBX/Platform for any NAT/Port issues.

IvanJukic · ‎Jul 1 2024

Hi @penangit , Try having a look at the Firewall Log monitoring tool. If your MX firmware is 18.2 or newer. You can use this tool to display if the traffic is blocked. I would also suggest to check your Firewall rules as well. See guides below. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Logging https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings

IvanJukic · ‎Jul 1 2024

Hi @ITGOOKULAMKMK , If your MX firmware is release 18.2 and newer you can use the Firewall Log monitoring tool. This will display the if the traffic is blocked or not. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Logging You can also check the Firewall rules as well, just in case there is no traffic when using the Tool. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings

IvanJukic · ‎Jun 30 2024

Hi @vijaykumar , If you design your network right, you can have a single transit VLAN between the MXs via your switches. Then have the Switches act as Layer 3 routing devices between the downstream hosts and the MXs. However, you really need to be careful how you can design this. https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair#Failure_Detection_2

IvanJukic · ‎Jun 12 2024

Nice!!!!! Well done!.

IvanJukic · ‎Jun 9 2024

Hi @meraki-newbie , As others have mentioned, it is recommended to run Multiple Spanning Tree on the Catalysts. As it is built upon IEEE 802.1D & IEEE 802.1w You can achieve interoperability with RSTP & Rapid-PVST. However, it requires careful planning and configuration. See below excerpt from the guide below. https://documentation.meraki.com/MS/Deployment_Guides/Advanced_MS_Setup_Guide#Protocol_interoperability ‘MS series switches can participate in spanning tree only when a spanning tree instance is running on Native VLAN of ALL switches. In addition, Native VLAN must be allowed on all Trunk ports running Rapid-PVST, so that BPDUs are seen by the Meraki switches in the topology.’

IvanJukic · ‎May 30 2024

I tell you what. I have some free time today. Send me a DM and I'd be glad to walk you through this via Webex.

IvanJukic · ‎May 29 2024

Hi @gagan239, NOTE: I DO NOT KNOW, THE FULL INS AND OUTS OF THIS VULNERABILITY. That said, Meraki Air Marshal does have some level of mitigation from Rouge SSIDs. See below guide for further details. https://documentation.meraki.com/MR/Monitoring_and_Reporting/Air_Marshal

IvanJukic · ‎May 29 2024

Hi @jperez_netics, What about Layer 2/3 LAN isolation? Client that connect to a "blocked SSID", can be denied (except, DNS and DHCP, which you can controll anyway) to local netwoks. 'Deny Local LAN' settings in Cisco Meraki MR firewall https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/'Deny_Local_LAN'_settings_in_Cisco_Meraki_MR_firewall

IvanJukic · ‎May 29 2024

hahaha... In my first 'Computer Class', I was using MacBookPro_2016

IvanJukic · ‎May 28 2024

Hi SlackerUH, Was Spanning Tree ever looked at? Could be an issue with Broadcast Storm being triggered and potentially shutting down links. Cheers, Ivan Jukić

IvanJukic · ‎May 28 2024

Hi Nethusiast, In the Inventory page, it should show the Network the device belongs to. From there, you click on the network and check if any recent client devices have been connected. You can also check the Summary Report for recent data as well. https://documentation.meraki.com/General_Administration/Inventory_and_Devices/Using_the_Organization_Inventory#Adding_Devices_to_Networks https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Summary_Report_Overview Cheers, Ivan Jukić

IvanJukic · ‎May 28 2024

Hi BMoody, That sounds like a fine plan to me. To mke things easier for you. You can clone the MX105 nextwork, and add the MX68 to the Clone and enable the VLAN for VPN. See below guide for details. https://documentation.meraki.com/MX/Other_Topics/MX_Cold_Swap_Replacing_an_Existing_MX_with_a_Different_MX#Create_a_Clone_of_the_Existing_Network Cheers, Ivan Jukić

IvanJukic · ‎May 28 2024

Hi Nabil, Have a look at this tshoot guide from Meraki and AWS . There has been some known road blocks with IKEv1 with "one unique security association per Tunnel". https://documentation.meraki.com/MX/Site-to-site_VPN/Troubleshooting_Non-Meraki_Site-to-site_VPN_Peers#AWS https://docs.aws.amazon.com/vpn/latest/s2svpn/your-cgw.html Cheers, Ivan Jukić

IvanJukic · ‎May 27 2024

For troubleshooting Voice, VoIP, Audio etc we treat it like an application. E.g. user can’t receive emails. If the end device can make calls, but not receive only during transfer. It would be blocked somewhere. So, need to establish if SIP is making its way through to the end device when trying to transfer. Suggest the following between phones at the site. i.e. ‘internal calls’. First, check VLANs, ACLs, Port Forward/NAT etc towards the port connected to the phones. Second, need to run a pcap on the port that is connected to the phone. Make some calls from the phone. Then try the transfer to the phone. Cheers, Ivan Jukić

IvanJukic · ‎Apr 10 2024

It all depends on the flow of the expected traffic. i.e. If the SFTP client is initiating the connection. Then no issue, it's what Firewalls' were built for. Simply put a firewall rule and port forwards/nat in place to limit the port and hosts. Something like the below. You could also pop the client in it's own DMZ as well. Just need to be very specific with Source and Destination hosts. https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Active_and_Passive_FTP_Overview_and_Configuration Cheers, Ivan

IvanJukic · ‎Apr 8 2024

Thanks @Ryan_Miles . Forgot to mention the deletion of leases.

IvanJukic · ‎Apr 8 2024

Hi @razortas, DHCP Discover messages will be broadcast out on every VLAN in order to get an IP Address from any server that is listening in those VLANs. For a micro-period, it can be possible, depending on the VLAN design. However, these should be sorted, once the clients get a valid lease. The client should stop broadcast the DHCP Discover message. Need to find out more information. So, in your circumstance; Is the MS130 continually sending DHCP messages for an IP Address? If so, how often and what is the lease time set to in the DHCP Server? Which VLANs is the DHCP server leasing IP address? Which VLAN is set for Switch Management? Cheers, Ivan

IvanJukic · ‎Apr 5 2024

I Agree with PhilipDAth. Best option. The End of Support date is Sep 28, 2029. So it will be supported til then. "Available in 2 different port densities, 16 or 32 x 10G SFP+, both of which include 2 × 40G QSFP+ uplink/stacking ports " https://documentation.meraki.com/MS/MS_Overview_and_Specifications/MS425_Overview_and_Specifications Cheers, Ivan

IvanJukic · ‎Apr 4 2024

Hi Avif, I've seen this a number of times in the distant past when content providers and such, have incorrect GeoIP records. I would suggest to contact Meraki Support for further assistance with this issue. Cheers, Ivan

IvanJukic · ‎Apr 4 2024

Hi Lloyde, The default WAN MTU on MXs is 1500 bytes. May I ask why you looking to lower MTU Size? Cheers, Ivan

About IvanJukic

IvanJukic

Ivan Jukić

Community Record

Badges