Meraki

Stefan_Zuber · ‎May 21 2023

We have done some packet captures. The source interface of the radius requests was the WAN interface, not the L3 vlan interface.

Stefan_Zuber · ‎May 16 2023

Can this behaviour be changed? Alternate Management Interface etc.?

Stefan_Zuber · ‎May 16 2023

Do you mean the answer is wrong or just fake?

Stefan_Zuber · ‎May 16 2023

Hello, when a SSID is tunneled in L3 roaming mode to a concentrator, the concentrator acts as Radius authenticator. Which will be the source interface / IP of the Radius requests? Is it the WAN IP of the concentrator (in routed mode)? Or is it the Vlan IP and with multiple Vlan‘s are different source IP‘s?used? Many thanks for your help!

Stefan_Zuber · ‎Feb 16 2023

and when the option is disabled, then 3rd party VPN will also be disabled for this subnet?

Stefan_Zuber · ‎Feb 16 2023

Hello, we need to build a third party VPN to Zscaler and allow only some subnets to route over there via 0.0.0.0/0. Other subnets should be routed via WAN default-route for direct internet access without Zscaler. Is there a way to configure this setup? Source based routing is not possible for 3rd party VPN's. Any ideas? Many thanks!

Stefan_Zuber · ‎Feb 16 2023

Hello, is the option VPN mode "enabled" under "VPN Settings -> Local networks" needed to advertise a local subnet to a third party VPN peer. The main purpose should be to advertise only the some subnets to the third party VPN and not to the Meraki Auto-VPN networks. In the Meraki Documentation this option isn't explained in detail. Many thanks!

Stefan_Zuber · ‎Feb 16 2023

I did not further troubleshooting with new firmware etc. The initial setup was good and after a long time running fine this issue happend for more and more sites. In a wireshark capture on the VPN concentrator (Hub) all looks good (source IP and port of the VPN peer). The issue was very strange for us. But we had only around 5 sites with this issue, not 320 spokes 😥

Stefan_Zuber · ‎Feb 3 2023

I had the same issue some time ago. We set the MX as „Exposed Host“ in the Fritzbox configuration as workaround.

Stefan_Zuber · ‎Nov 3 2021

Hello together, is there a way to generate a report with any interfaces (if desired over the whole organization) which occurs CRC errors? Something like a Top 10 list would be great. Or is there another way to identify these interfaces in an easy manner? Best regards

Stefan_Zuber · ‎Jan 14 2021

I'm excited to get the CMSS badge soon!

Meraki

Community

About Stefan_Zuber

Stefan_Zuber

Community Record

Badges

Re: SSID Tunneling Radius Interface

Re: SSID Tunneling Radius Interface

Re: SSID Tunneling Radius Interface

SSID Tunneling Radius Interface

Re: Option VPN mode "enabled" for third party VPN

Third party VPN and local internet breakout

Option VPN mode "enabled" for third party VPN

Re: AutoVPN and Fritzbox

Re: AutoVPN and Fritzbox

CRC errors - report network-wide or over the oranization

Re: ECMS badges are HERE!

Re: ECMS badges are HERE!