Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About navysubvet
navysubvet
Here to help
Member since Jan 3, 2022
Jul 14 2023
Kudos given to
Community Record
19
Posts
1
Kudos
0
Solutions
Badges
Jul 12 2023
4:02 AM
I understand, but basically trying to route all traffic thru Meraki, but leave Cisco switches connected and move over slowly Legacy/Existing: Non-Meraki FW (L3)>Cisco core and access switches (all layer 2). New Environment: Meraki MX (Layer3)>Meraki access switches (all layer2) Both environments accessible but isolated (have one uplink between the 2). MX has separate public IP (same subnet). Trying to migrate without taking down existing, and do as much pre-config work as possible. Meraki can't access current Lan resources (AD, etc)
... View more
Jul 12 2023
1:33 AM
I have a connection from each legacy Cisco device, to another Meraki switch, but it allows me trunk only vlan 1. When I add other vlans, I lose connectivity
... View more
Jul 11 2023
10:28 AM
Trying to limit users on public wifi internet, to 1 hour per session. Is this possible with the Meraki devices?
... View more
Jul 5 2023
2:31 AM
Strictly user internet access. Employees that log in, authenticate via AD, are directed to a Proxy (https://blahblah:8080), that allows certain internet access, based on their AD group. There's a specific group that bypasses the Proxy altogether. It's straightforward with other firewalls, but, I'm trying to define this in configuring the MX
... View more
Jul 1 2023
10:40 AM
Client currently redirects users through a proxy appliance URL https://xxx.xxx.com:8080, when they log in via Active Directory. Some users are in a group that's allowed to bypass. How/where do I configure this? Hope this makes sense
... View more
Jul 1 2023
5:39 AM
My client has a proxy redirect url to port 8080? How do I build that in Meraki?
... View more
Jun 28 2023
7:13 AM
My Meraki devices can ping google/outside, but can't ping my internal servers (like AD). How do I remedy that?
... View more
Jun 28 2023
5:47 AM
All vlan SVIs reside on the MX. I do have those included across the trunk uplinks. I just wonder where I allow "all", if only the vlans with SVIs (and IP addresses) will show,. Must those vlans without SVIs be defined by number, or will they be included in the "all"? Hope that makes sense...
... View more
Jun 28 2023
4:13 AM
On Cat switches, you could config a Vlan SVI with no IP address. How does one config/duplicate this in the Meraki environment? I have several vlans that were not migrated to Meraki, but those devices till need to communicate
... View more
Jun 27 2023
1:20 AM
I'm considering getting everything migrated to the new Meraki switches first, but leaving the CP firewall in place. Once stable, then carefully adding the MX. How do I stand up the MX at the same time, but without interrupting. Can I do a passthrough or possibly VPN between the firewalls? I was able to change the MX to a different public IP (same subnet as the CP fw)
... View more
Jun 26 2023
10:58 AM
My MX105 was previously configured with the same IP as the legacy firewall. I have other public IPs available, but I'm worried about losing connectivity (I'm several states away). For that reason, I'm hesitant about pulling the trigger. What are my chances?
... View more
Jun 22 2023
6:13 AM
On my non-Meraki FWs, I've always been able to toggle certain rules on/off, as needed. I'm not seeing the option on the MX105. Does that option exist, and if so, where? Maybe I'm overlooking it...
... View more
Labels:
- Labels:
-
Firewall
Jun 21 2023
8:40 AM
Does anyone have a sort of "migration checklist" they can share? I'm just trying to avoid overlooking something
... View more
Jun 18 2023
7:12 AM
Thanks for the input, Guys. I don't have a maintenance window, as this is an entire town and all its government resources. Also with me not being on site, I have to be even more cautious...
... View more
Jun 18 2023
3:27 AM
1 Kudo
Replacing existing FW wirh MX105. Inherited a 100% remote project that has Meraki devices already connected (all still on default vlan 1), but MX has same public IP as legacy FW, and already has the same L3 vlan SVIs & DHCP configured. How can I test connectivity to Active Directory, etc with this setup? I'd prefer to readdress the Meraki gear (and remove the SVIs), but I'm afraid of losing connectivity to the Meraki devices. There's also an MS switch, that's connected to a legacy Catalyst 3750. Is there any way to run bot FWs parallel, and still be able to reach some of the internal resources?
... View more
Jun 18 2023
3:10 AM
Follow-up question... Most of the ACLs have only 1-2 MACs, but there are a few with more than 20 MAC listed. Should I go with the Sticky MAC option on those ports? Will it allow me to enter all the macs there?
... View more
Jun 15 2023
5:53 AM
Is it possible to duplicate my existing MAC ACLs on Cat 3ks, and build them on the Meraki MS Switches? Is there another way to accomplish this via policies or? Example: Extended MAC access list ACME permit host 001x.002x.003x any
... View more
Kudos given to
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 2845 |
© 2024 Cisco Systems, Inc.
