Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About cmonk
cmonk
Comes here often
Member since Feb 10, 2022
Nov 28 2023
Community Record
12
Posts
0
Kudos
0
Solutions
Badges
Nov 27 2023
9:27 PM
It is expected. MX sourced Ethernet requests come with NAS IP 127.0.0.1 and Wireless requests come with NAS IP 0.0.0.0. To work around this issue we define a high vlan number for management and define our network devices in ISE with this IP address.
... View more
Yep, I would hit up support and ask that they "unhide" those two settings above for your org, then you enable per access policy. That's what fixed us.
... View more
Mar 8 2023
6:54 AM
Yep, I've already done so. Really wish we saw movement on "wishes".
... View more
Sorry for the late response, I don't typically sign back in here unless I have an issue. 🙂 Yeah, Meraki support enabled a couple features within my org that seems to fix Critical Auth recovery across all networks once I enabled. "Guest port bouncing" and "radius monitoring"
... View more
Mar 7 2023
11:21 AM
Is there any way to pull security appliance uplink masks via API? The get org uplink statuses appears to omit the mask completely.
... View more
Aug 23 2022
7:00 AM
I had opened a case a few weeks ago regarding critical auth vlan recovery not working like it should. Several different switch models running 14.33. The port would appear stuck providing canned eap responses instead of reaching back out to the radius server when client was connected/re-connected. I'll be awaiting a fix for this as well it would seem.
... View more
Jul 15 2022
3:07 PM
Couple of questions that have been bothering me lately. 1. Two MXs via WAN1 establish an AutoVPN tunnel over an MPLS network using private IPs and is working for months. That MPLS service loses its reachability to the internet; MXs cannot communicate with Internet but can still communicate with other MX. Does the VPN tunnel between the two MXs still exist? Will they continue to pass traffic over VPN without connection to dashboard as long as no changes occur within the MPLS? Or are the tunnel torn down? 2. Additionally, add a direct Internet connection to both MXs in WAN2. AutoVPN tunnels are established over both WAN ports and is working for months. The MPLS service loses its reachability to the internet. The MX marks WAN1 "failed" and fails all traffic over to WAN2. Does that VPN still exist between the two MXs over WAN1 as they can still communicate via their private IPs, just cannot get to the internet using that WAN1 interface? Or are the tunnels torn down?
... View more
Labels:
- Labels:
-
Auto VPN
Feb 10 2022
2:55 PM
Thanks for the quick reply. I'll look into the driver issues. Would still love the Z to be able to change session timeouts like the MRs.
... View more
Feb 10 2022
2:50 PM
They are several different, but the one I have been working on with support is a Dell Precision 5550 running an Intel WiFi 6 AX201 card.
... View more
Feb 10 2022
2:41 PM
Running into an issue where Z1/3 wireless clients (Win10) are getting disconnected momentarily every 60 minutes. This was mostly not noticed by end-users, that is until jabber wouldn't reconnect after this. It would require a full disconnect from the SSID and reconnect to get Jabber to be able communicate again. We have a WPA-EAP SSID setup. We've recently updated radius to supply session and idle timeout we've configured of 720 minutes. It appears the MRs are honoring this session timeout and not forcing a rekey during the day. However, however the Zs do not appear to be honoring this session/idle timeout setting. We have a ton of Zs that are doing this. Enterprise wide we are running v15.44 Anyone run into this issue? I do have a case open, but they are having to gather a ton of different captures to provide dev group.
... View more
© 2024 Cisco Systems, Inc.
