Meraki

jimmyt234 · ‎Sep 17 2025

Has the VPN policies created this problem or did you never have connectivity to the Hub servers in the first place?

alemabrahao · ‎Sep 12 2025

Default Behavior: Yes, Client VPN is full tunnel by default, all traffic (including internet-bound) is routed through the VPN. Dashboard Control: Correct, Meraki Dashboard does not control split/full tunnel behavior for Client VPN. Split Tunnel Configuration To achieve split tunneling, you must manually uncheck “Use default gateway on remote network” in the Windows VPN adapter settings. This causes internet traffic to go directly out the local interface, while traffic destined for internal networks (defined by the VPN subnet) still goes through the VPN. Site-to-Site VPN Controlled by Dashboard: Yes, the “Use VPN” and “Default Route” settings in the Hub configuration control split vs. full tunnel. Checkbox Behavior: Checked = Full Tunnel: All traffic from the spoke is routed to the hub. Unchecked = Split Tunnel: Only traffic destined for specific subnets (advertised by the hub) is routed through the VPN.

alemabrahao · ‎Aug 28 2025

Well, considering I don't know your customer's topology, let's address some important points. A non-Meraki VPN doesn't participate in Auto VPN, so if you have a non-Meraki VPN configured on Site A and want to access a resource on that VPN through Site B, you won't be able to. As I said, I don't know if this is your case, because without topology details, the rest is speculation.

alemabrahao · ‎Aug 4 2025

I would disable it globally.

alemabrahao · ‎Jul 22 2025

Sorry, force of habit, active mode.

RWelch · ‎Jul 17 2025

Accessing Local Status Page Cisco/Meraki C9300 Switch courtesy of @MaxMartini

Nazmul_Hossain · ‎Jul 15 2025

Upgraded APs at our two office locations. Hope there will be no major BUG.

athan1234 · ‎Jun 26 2025

was solved the problem was in the provaider

alemabrahao · ‎Dec 10 2024

Yes, correct.

ww · ‎Oct 5 2024

Yes. If you want to use the native switch port vlan (1).

athan1234 · ‎Oct 1 2024

You are right , thanks

athan1234 · ‎Sep 24 2024

I've solved the radius issue adding /24 . ///////////////////////////////////////////////////////// The next step is moving this DHCP on one FW to other FW For testing i moved one AP but i got this resoult As wll i cant see in the box the radius ok . like this

PhilipDAth · ‎Aug 10 2024

Choose where you would like things to plug in on the MX105. Copy the old LAN port configuration to the new port location you want to move the cable to.

kmcgaugh · ‎Jul 16 2024

This is caused by your MR and MS appliances being unable to resolve domain names over the configured DNS servers. Try setting DNS to a public IP such as 1.1.1.1 or 8.8.4.4.

kchand · ‎Jun 7 2024

Hello Athan, As @alemabrahao mentioned, NAT mode with Meraki DHCP isolates clients. Devices with a Meraki DHCP address will be able to access external and internal resources, such as the Internet and LAN (if firewall rules permit). However, connected clients will be unable to contact each other. So, the alternate solution for your deployment is to configure the SSID in bridge mode (External Client IP assignment) and use your DHCP servers to provide IP addresses to your phone and the scanner devices. URL- https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/NAT_Mode_with_Meraki_DHCP

athan1234 · ‎May 22 2024

One additional thing The customer has two internet lines, WAN1 main with getting DNS company and the other line WAN 2 getting 8.8.8.8. What would happen if I had to force to exit the wan2 the traffic? There will be a disconnect in the aps. The purpose is to test DNS to see if there are any problems.

athan1234 · ‎May 10 2024

thanks for your reply @alemabrahao @PhilipDAth @Purroy @ww @Purroy i putet the native vlan like 40 and @ww cjhange the mgmnt the AP comes up without tag thanks guys

athan1234 · ‎Nov 3 2023

Thnaks @alemabrahao

athan1234 · ‎Sep 14 2023

Hi . @cmr I restarted each switch, and I can now see the topology.They are are up I'm wondering if it would be sufficient to prioritize only the two cores, or if the others would also need to be prioritized. If not, the remainder of the switch would be set to default. really? for other hand . I a getting error any idea

alemabrahao · ‎Aug 2 2023

Can you give us more details?

alemabrahao · ‎Jul 26 2023

It's a good way to start, I think you should talk to him and gather as much information as possible.

alemabrahao · ‎Jul 25 2023

What do you mean with customer doesn't work? Could you please explain the real issue?

PhilipDAth · ‎Jul 10 2023

When the switch is showing as down in the Meraki Dashboard - what does the local status page show? https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page#MS_Series

PhilipDAth · ‎Jun 29 2023

I agree with the others. An easy way to fix this is order an additional MX67 licence (quickly) and just add it (not as a renewal).

TBHPTL · ‎Jun 28 2023

that screenshot shows no uplink...

Meraki

Community

About athan1234

athan1234

Community Record

Badges

Re: Best way to restrict VPN client access to specific hub servers (hub-and...

Re: Client VPN from spoke cannot reach hub servers - no routes to hub netwo...

Re: VPN non meraki tunnel not connet

Re: Meraki Topology Showing Switches Hanging Incorrectly

Re: Migration from Cisco 3750 Stack to Meraki 9300M CS 16.8 – Questions Reg...

Re: Managment port stack local page

Re: Wireless firmware versions MR 31.1.7 changelog - Stable release candida...

Re: IPsec Tunnel Not Establishing

Re: Clinet VPN question

Re: I have no internet conexion SSID_corp (urgent)

Re: Error conflict DHCP

Re: Understanding of Radius scenarios ( wifi)

Re: Meraki MX100 replaced for MX 105

Re: DNS is misconfigured AP-SW

Re: Issue scaner not conecting

Re: splash page error device

Re: Please helpme i don get to come up an acces point

Re: scenario was Meraki versus SW HP

Re: Some Issues SW topolgy

Re: Mac pro i can reach internet connection

Re: Site to site VPN no come up

Re: I cant reach google ping

Re: SWitches on the templete Up to date

Re: License question CO-Termination

Re: Printer Scaner

Re: Site to site VPN no come up

Re: Deauthentification client

Re: Error conflict DHCP

Re: Static IP - I don´t get to understand