Meraki

Adeldardari · ‎Nov 12 2023

Hi All, I got a design question. Can Meraki VMX be my primary Azure Gateway/Firewall ? Further details: Planning to have some applications services in Azure cloud (IAAS/PAAS) , those applications can be access via private link ( site to site IPSEC) or via Public IP Address. I was wondering if VMX can behave as "windows defender" and be the gateway where Azure sits behind it ( i know technically it cannot be done, but just wondering if there is a work around solution to achieve my goal ) If can't , i am wondering where do i place VMX in the design , do i give it private or public IP ( or both) to still have access to internet and also to access local resources that would be behind Azure firewall Appreciate your feedback

Adeldardari · ‎Nov 2 2023

Hi All, i am trying to find out if we can use MX as a radius server without confiruing an external radius device like nps. has anyone been across this ? and what are the requirements / model number..etc for MX ? If yes, can we also integrate it with AD or any 3rd party IAM ? appreciate your reply

Adeldardari · ‎Aug 17 2022

Just an update; service provider did not provide us /29. What we did was to utilize the 2nd 4G uplink (MG21) so that MX1 gets two uplinks ( fiber + 4G) , and MX2 ends up with 1 uplink (4G). We made sure that both MX1/MX2 are connected to a LAN switch with trunk ports for keep alive mechanism. We dropped MX1 and failover worked.

Adeldardari · ‎Aug 2 2022

so how does it work? do you configured the virtual IP Address with the other IP's on the same VLAN ? I am trying to map the traffic flow logically , so my LAN traffic would have the V-IP as it's G/W and then V-IP will forward the traffic to the physical active interface with a real IP on it , and that interface would just reach to the PE router? and what happen in the ingress packets coming from ISP ?

Adeldardari · ‎Aug 2 2022

Thanks for the replies, yea I am aware of the L3 extra device that would be needed and the fact that comes with extra complexity. I was wondering if there is any other solution using a public IP assigned from ISP but i guess there isn't. Moving forward, Introducing a 2nd ISP ( or a 2nd internet service ) was on table although we would end up with the fact that each MX would be tied to one service only. Thinking about it, we actually have a Meraki LTE router (MG21) that comes with two LAN ports, a POE and None POE . The POE is currently connected to the primary MX as a secondary uplink, I will see if i can use the other port and connect it to the backup MX ( hopefully power won't be an issue - we don't have adapter so we are using the PoE port ).

Adeldardari · ‎Aug 1 2022

Hi, we are trying to get 2 x MX to be deployed in HA mode at a site. Issue is that service provider is only providing us a /30 peering IP Address with their NTU. We asked them support one of the following options : To provide connectivity to both of our MXs, we may need an IP range with subnet mask of /29, which will provide the capacity to connect 6 hosts. This will eventually suffice our requirement to provide IP addresses to both of our MXs. Option2 : Providing extra port at NTU with a new IP range of /30 To provide connectivity to both of our MXs, we may need an extra port at NTU with a new IP range of /30, which will suffice our requirement to provide IP addresses to both of our MXs. The problem is that the ISP came back and said they don't support any of the above options ( or won't support ) and that the only thing they can do is to provide us with /29 public IP addresses which we can statically route into our internal network. would this solution work ? if yes, how would you configure it ?

Meraki

Community

About Adeldardari

Adeldardari

Community Record

Badges

VMX in Azure

MX as authentication server - Radius

Re: MX HA Mode with Public IP

Re: MX HA Mode with Public IP

Re: MX HA Mode with Public IP

MX HA Mode with Public IP

Re: MX HA Mode with Public IP