Meraki

PhilipDAth · ‎Mar 29 2023

If you use either RADIUS or SAML authentication, you could just create a group to say who is allowed to connect. If you are using local Meraki auth users - I believe you have to authorise them to use the VPN.

amelendez · ‎Feb 3 2023

I have a mix of mostly 6 inch patch cables there are some 12 inch and longer here.

Enzoly · ‎Nov 9 2022

Hello. I have a problem with the same error but when I connect a Cisco 7940 Series phone to my Meraki MS355-24 switch, when I connect the phone to the port, the port immediately blocks and I get the Very high proportion CRC error. I have already used several different cables, but I don't know what is causing the error. Thank you

AxL1971 · ‎Aug 30 2022

a API call can do this, I have written a application that does this, as we change the password every month.

TheAlchemist · ‎Aug 26 2022

Actually, Mx was showing Wan 1 as Public IP and MS switch was showing Wan 2 as Public IP. Power cycled switch and its all good. Both Mx and Ms devices show Wan 1 as Uplink ip. Thanks

RomanMD · ‎Aug 10 2022

In the routing, the most specific route takes precedence, so you can have a route: 10.10.10.0/24 next-hop 10.9.9.1 -> route for the subnet 10.10.10.5/32 next-hop 10.9.9.2 -> route for the host

CptnCrnch · ‎Aug 4 2022

Well, that's what I call optimizing! 🤣

Kyojuro · ‎Aug 3 2022

To anyone who was interested in this one, the ISP actually had some routing issues on their side with another ISP's external IP addresses.

Kyojuro · ‎Jul 28 2022

Have you tried applying the All Non-Meraki / Client VPN filter in the event logs? Seems like that's what Meraki recommends for Non Meraki peer VPN traffic.

cmr · ‎Apr 22 2022

Yes, there was an alert sent out about 30 minutes ago.

MarcP · ‎Apr 19 2022

I would also recommend a 1Gb SFP module as well. And would add to be aware, this is not a Meraki SFP you are using. Maybe this can cause these crc errors as well.

PhilipDAth · ‎Mar 14 2022

Actually, it is in the main event log. Try filtering on blocked files to see only those events.

Inderdeep · ‎Jan 20 2022

Every vendor is taking this way to block by default until unless you put the allow rule in place !

Volcomer · ‎Jan 6 2022

That's just not true. When enabling HA on MX85's the primary also reboots witch causes disruption.

KarstenI · ‎Dec 27 2021

You can use port-ranges in the group-policy, but comma separated lists are IMO only valid on the "general" L3 firewall.

DarrenOC · ‎Dec 22 2021

What do you see when you go into Security Centre and look at the Mx events? Click into the packet captures and you’ll see which endpoint is possibly affected.

Brash · ‎Dec 13 2021

Chances are you can configure just about all of this in the firewall on the MX250. Outbound rules can be set with the applicable source/destination subnets & ports to allow/deny. Or you can add an explicit deny all as the last configurable rule. The rest depends on your topology: - Whether the static route is for a WAN port or LAN port or S2S VPN? - Is your MX setup for NAT or No-NAT? Is it common practice to deny all outbound connections in the firewall and only allow wanted outbound connections? It really depends on your use case, traffic flows and security you're putting in place. For example blocking all outbound except for specific allowed rules is a common firewall technique. However for many SMB's it is too much overhead to implement and maintain the rules. Therefore the trade-off may be that they leave the allow any-any rule for an arguably less secure but easier to manage environment.

Meraki

Community

About Kyojuro

Kyojuro

Community Record

Badges

Re: Block Clients from Connecting to Cisco Anyconnect VPN

Re: Ugly Patch Panel Cables

Re: Very high proportion of CRC errors Meraki Switch

Re: Changing the Wifi Password for Multiple Networks at the Same time

Re: With Traffic Shaping disabled, why would I see consistent traffic on Wa...

Re: Way to setup a static route for one IP address

Re: Device/user loses Internet access after connecting to Client VPN

Re: Meraki Site to Site VPN Disconnect

Re: Troubleshooting Non Meraki VPN Peers

Re: MX250 keeps dropping

Re: very High CRC and packet Fragmentation

Re: Threat Protection Allow list files

Re: Block a port on WAN IP address on the MX in the firewall?

Re: SD WAN WarmSpare Setup Question

Re: Group Policy Layer 3 Firewall Rule Comma Separated Ports?

Re: Apache Log4j Vulnerubility

Re: Opening Ports for Static Route

Re: With Traffic Shaping disabled, why would I see consistent traffic on Wa...