Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About Tariqmahmood
Tariqmahmood
Getting noticed
Member since May 19, 2022
Thursday
tarmahmood1
Community Record
35
Posts
3
Kudos
2
Solutions
Badges
Tuesday
Related to traffic between branch office and 3rd party application: Since 3rd party application is accessed through https://abc.companydomain, I think it would work if all traffic goes to DNS in Domain controllers and DNS then points to 3rd party application link. So point is Branch offices DNS are pointing to Domain controller(DNS). Since all non peer will be connected to Azure network. So if branch office wont communicate with each other but atleast they can communicate to 3rd party app(https://abc.companydomain.) what do you think?
... View more
Monday
Yes plan is that they should access 3rd party application behind VPN(non meraki) then how should we try to do this? any recommendation Branch A is MX and other are Cisco legacy routers(not MX)
... View more
Monday
We will replace Cisco CSR1000v with vMX, vMX will be connect to site branches and have some non Meraki VPN peer networks. I have Cisco ASAv in Azure for VPN, we are planning to remove Cisco ASAv and use Meraki client VPN. My question is 1) How client VPN will communicate to 3rd party application that is connected through non-meraki VPN tunnel.(diagram attached) do i need to add routes(static etc) 2) How many users can connect at a time? do we need any additional license for this feature?
... View more
08-18-2023
01:58 AM
can you please confirm, I am bit confuse about peer ID and peer endpoint at non meraki side. here is the script i have used, The tunnel is up but it doesn't pass any traffic, after your reply i have added port forwarding rule at MG side, still not tested due to downtime not approved yet. over here do i need to give 172.31.128.4? crypto map CMAP1 40 ipsec-isakmp set peer (public-IP of celleuar gateway) set security-association lifetime seconds 28800 set transform-set VPN set pfs group14 set isakmp-profile 4G-link-backup match address Interesting_Traffic reverse-route static crypto isakmp profile 4G-link-backup keyring tunnel-keyring-4G match identity address (public-IP of celleuar gateway) 255.255.255.255 local-address 10.243.0.4 mode tunnel crypto ipsec transform-set VPN esp-aes 256 esp-sha256-hmac crypto keyring tunnel-keyring-4G pre-shared-key address (public-IP of celleuar gateway) key xyz...... MG side: Is this ok?
... View more
08-17-2023
09:40 AM
@PatrikStar were you able to solve above, connecting MG to non meraki peer in cloud? Can you share your experience
... View more
08-17-2023
06:30 AM
Hello, We have a warmspare device MX85 connected to MG41. MX WAN IP is taken from MG41(IPv4 ip addressing and NAT), so on left side of pane we get the public IP info(which is the SIM IP) and on right side in uplink tab WAN2 we get the ip from MG41 which is private IP(as shown in screenshot). For primary we have ISP fiber link and we get public IP on uplink(not private) and created the ipsec tunnel to non-meraki(CSR1000). The tunnel works fine for primary, but for backup what IP should be used at peer side, I used public IP and the state of tunnel was UP-Idle(UI) at CSR side. Should i set peer (public IP) or (private IP 172.31.128.4) in my case or need to add private subnet from MG into interesting traffic config at CSR crypto map tunnel 40 ipsec-isakmp set peer (publicIP) or 172.31.128.4 set security-association lifetime seconds 28800 set transform-set VPN-tunnel set pfs group14 set isakmp-profile VPN-tunnel-R02 match address Interesting_Traffic
... View more
08-15-2023
02:53 AM
Hello, I have generated two API keys from my admin account xyz@.... which has full access, intention was that with second API, i will be using for monitoring purpose. but it is said the API should be read only. What is the way to make second API key to read only with same admin account. I dont see any option to make it "read only" from dasboard. I have tested the key with site24x7 tool and it fetches all the nodes info from Meraki. or should i keep it like this as it is. thanks
... View more
07-17-2023
06:52 AM
Hi @cocacond Did you manage to setup a non-meraki tunnel with ISR device. Can you share the script for ISR device to setup tunnel. Thanks.
... View more
05-02-2023
01:28 PM
Hi @Fabian1 i am going to have warm spare MX with ISP2 public IP. One non meraki vpn tunnel is established to our Csr1000v1 in azure, and from warm spare i want to establish tunnel to CSR1000v2. I have no idea, where do you deploy the scrpt primary_link up and backup_up. Is it at meraki side or will be in Azure. I am new to this API thing. If you can share steps so that i will follow them to implement. Thanks
... View more
05-02-2023
12:12 AM
Yes the setup is new. It was installed and connected to Meraki cloud one week back. but two days back due to Power outage happened, the configuration was lost.
... View more
05-02-2023
12:04 AM
@alemabrahao I had a call with Cisco umbrella support and found out with basic license package i cant integrate Meraki appliance with umbrella. License upgrade needs to be done for integration to be working.
... View more
05-02-2023
12:01 AM
Hi, Any idea why i need to give static IP WAN1 everytime after hard reboot of appliance. We had a power outage at site and device did not connected back to Meraki dashboard, so when login into the device locally there was no WAN IP. Even though configuration were saved after giving the details before. Thanks
... View more
04-24-2023
05:12 AM
@alemabrahao As per my understanding the virtual IP address(VIP), i need to get it from ISPs? or will give any private subnet by my own? Since i am using only only /30 subnet for both ISPs. Can i continue with /30 address i.e using only MX uplink IP for the time being?
... View more
04-24-2023
01:29 AM
Hi, As shown in diagram, I have two MX-85 connected to ISP1 and ISP2. At the moment i have configured MX85(primary) connected to ISP1 and established non-VPN tunnel to CSR1000v1 "CSR1000v1". Now i am going to add MX-85(backup) connected to ISP2 as warm spare. If i add another peer non-meraki tunnel as CSR1000v2, how MX-85 in warm-spare will know it will use second tunnel. What i am thinking is if Primary MX has tunnel to CSR1000v1 after failover of MX(primary), the backup will use the same tunnel(CSR1000v1) not CSR1000v2. Any idea? Note:Both tunnel will have same private subnets. Thanks
... View more
03-21-2023
01:45 PM
Hi, I am trying to integrate Cisco umbrella to my network with MX appliance. I have generated the key and secret in Cisco umbrella and added to Network-wide-->general-->Cisco Umbrella account. After doing above step, then i have tried to enable umbrella protection but got error. I am not able to identify how to fix this one, any idea? I dont see any IP restriction from MX side that makes it unauthorized to connect to Cisco umbrella.
... View more
03-16-2023
09:06 AM
@Brash As mentioned by @Ryan_Miles If i am setting up the root bridge and backup, we can avoid loops.
... View more
03-16-2023
02:58 AM
Hi, I am soon going to implement MX85 with redundancy, I will follow below design, Is it fine or am I missing something important info before proceeding for an activity. Any suggestions? Thanks
... View more
03-08-2023
02:56 AM
If we turnoff 2.4ghz, is there any negative consequences, that devices not supporting 5Ghz can connect to network or not?
... View more
02-08-2023
04:33 AM
Hi, Is it possible to block non complaint PCs in LAN network to access other resources for example in Azure. We have VMs in Azure and want non-complaint device not to access them through wired LAN network. We have meraki switch and MX appliance and NPS server in Azure. any practical link for such setup will be appreciated. Thanks Scenario: If a person comes with his personal PC and connects to switch port configured with CORP-network VLAN he should be directed to Guest vlan rather CORP. For wireless i know we can do that but not sure about wired network.
... View more
01-30-2023
06:00 AM
@alemabrahao @GIdenJoe @KarstenI @rhbirkelund Thank you for your response. I will get back with outcome once it is implemented. hopefully end of feb-2023
... View more
01-26-2023
05:23 AM
Hi, We are inprocess of planning to setup Branch A office to meraki from Cisco. we have Cisco wlc 3502 in Branch A office and APs in Branch B are connected to it. my question is will Cisco WLC3502 connected to MS120 will work same as it is working now(as shown in figure) or should i connect to Cisco 2960 switch and then 2960 switch is connected to MX appliance directly or to any other Meraki switch. My intention is that even if i want to change to Meraki setup the APs in Branch B still connects to WLC in branch A and works as it is? Otherwise i have to make one of Air-AP WLC and connect all APs to it in Brach B office itself? Thankyou.
... View more
01-06-2023
04:13 AM
@Brash @alemabrahao It worked without any issues. I just connected my switch to cisco 2960, after few minutes the switch was up and visible in Meraki dashboard. Thank you both of you.
... View more
01-04-2023
04:33 AM
Hi, Is it possible to install MS120-8FP switch behind ISR4000 router. the setup will be like this Internet <--> ISR4000 <--> Cisco2960 switch <--> Merak MS120-8FP. How i will setup the in Meraki dasboard, will it get public IP for the ISR device? I am bit confused.
... View more
11-17-2022
02:46 AM
2 Kudos
Yesterday I had a call with support, and we were able to find the solution. We added the meraki vMX subnet to vMX S2S VPN from meraki dashboard and the Ping started to work from MX to vMX and vice versa. but before i didn't have such subnet added and it was working fine as well. Technically it should not have pinged before for (1 year :)) without adding vMX subnet. So, in conclusion the downgrade has nothing to do with this Ping failure between MX and vMX, it was configuration error.
... View more
11-14-2022
06:23 AM
1 Kudo
Thank you for reply. Yes, i have opened the case with Meraki, waiting for their action. Thought maybe someone has experienced the same issue.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 167 | 05-02-2023 12:04 AM | |
| 336 | 09-20-2022 03:05 AM |
My Top Kudoed Posts
