Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About TroyV
TroyV
Here to help
Member since Jun 14, 2022
yesterday
Community Record
15
Posts
3
Kudos
1
Solution
Badges
Jan 4 2024
10:56 AM
I have a location in Ch*na that has two regular 500mbps uplinks with the different telco vendors there. I am currently paying a company to get select traffic in and out of that location without it being stopped by their censorship. Could I use SD-WAN with a split tunnel formation to do the same thing between two MX-250's, one there and one in Hong Kong. That is, move select traffic through the country's firewall without it getting stopped? If not, then what are some ways that people have been able to perform this?
... View more
Labels:
- Labels:
-
Auto VPN
May 16 2023
8:42 AM
I got a response from Meraki and they said to shut it off and turn it back on again. That did solve the issue and the issue didn't reoccur but that doesn't explain why it happened in the first place. The only thing I can think of is since it was a HUB, even though nobody used it for connections, that it had to be depreciated to a SPOKE and then you could make these kinds of changes. To be fair, the system did warn me to some extent as in "Changing the DDNS hostname will force the device to fetch a new AnyConnect VPN device certificate so please change this setting sparingly." I just think they could reword it since nothing happened to my AnyConnect, but my worldwide S2S links died because of it.
... View more
May 4 2023
8:16 AM
I appreciate the comment but that is not what it was. It has something to do with the firewall being a HUB, but I just don't understand why it would bring down the other HUBS. If anything, it would have been disassociated for a time being, unable to be reached and then it would have been reintroduced. The VPN was and has been working without issue. I can reach Meraki from both inside and outside of my network. As soon as I made this change all my VPN tunnels went down and there was no VPN for anyone everywhere until I removed this firewall from the equation that I made the hostname change on.
... View more
May 3 2023
12:35 PM
I made an adjustment to a firewall that I had setup as a HUB in my S2S environment. This firewall had no users connected to it so I changed the hostname of the firewall. A couple of minutes later I started getting reports that users all over were not able to use the VPN, getting authentication errors and PPP server not responding from the other HUBS. Unsure as to what happened but knowing that it had something to do with the change I checked various settings and verified DNS information (still pointing to the other HUBS) and RADIUS servers, all were good, but the issue persisted. I ended up changing the firewall from a HUB to a SPOKE and that resolve the issue with one of my HUBS but not the other. I ended up removing the non-working HUB from the SPOKE list and the issue was resolved. As of right now, this firewall is still setup as a SPOKE and need it as a HUB. Can someone tell me if and when I can change it back or if I have to use the old hostname that it was originally prior to the change. I would also like to know how this could have happened where changing the hostname of this firewall would drop all other HUBS and deny VPN connections. Any information would be extremely helpful, thank you.
... View more
Labels:
- Labels:
-
Firewall
Even though the rules were set to allow for the needed traffic to pass, disabling the firewall and antivirus was the key winner here. Thank you all for your responses.
... View more
No, I can give this a try, thank you.
... View more
I have a computer directly connected to my Meraki switch. This computer has gotten an IP address from the server and can reach out to the internet but I am unable to use the switch to ping 'its IP address nor can I ping with while on VPN. I can ping other devices from VPN that are in that same VLAN. I first had the device static, was able to get out but couldn't ping it. Made sure that the firewall settings allowed for ping on this Windows 10 computer. I then moved it to dynamic and it got a different address but am still unable to ping it. VLAN on port is correct along with port settings that match other locations that this is working at. I have tried opening routes but there is no change. I made some firewall adjustments but there is no change.I had it set to a reserved address in Meraki but it wasn't working so I removed it. Set the subnet mask in the IPv4 settings of the computer to /16 but then the computer was not able to get out to the internet. Restarted all devices. Can ping the device while connected to the same switch as device. I don't believe that this is network related as I am able to ping other devices within that VLAN. I am unable to think of what else I can do at this point. Any suggestions would be much appreciated.
... View more
Sep 14 2022
2:14 PM
I have been looking but I can't seem to find a way to audit what API keys have been setup for my users and what they are accessing. Does anyone know of a way to audit active API keys for all users in your organization?
... View more
Aug 12 2022
7:34 AM
1 Kudo
We ended up finding out the issue. The problem was caused by Chinese Characters in the Log-in Banner. When we removed some special characters the issue went away and users where now able to log into AnyConnect on their Windows devices. Thank you to those that responded. We did test DNS but that didn't resolve the issue, somewhat shocking, because it normally is DNS. I also didn't feel comfortable posting certain logs as they would show critical information. I could have blurred information but knowing my luck it would have been information necessary to troubleshoot. Thanks again everyone!
... View more
Jul 22 2022
11:05 AM
We have a setup with AnyConnect and split tunneling so I know that there is some service getting blocked, but can't seem to find which one. This is coming from China so we have an SDN provider that creates us a tunnel so our users can use Google and their services amongst other programs. We have this working for all of our MAC computers and have recently been introducing Windows into the environment but I am unable to get the Windows computer to connect while using split tunneling. If I send all traffic through the tunnel then it works, but if I split it with our current allow list, it won't work. I ran a Wireshark capture but it isn't telling me much or I am not seeing something that is there. Has someone come across this issue and had to whitelist/allow certain services through the tunnel in order for their Windows devices to be able to connect. *Whitelist/allow - Both Client Routing & Dynamic Client Routing are active.
... View more
Labels:
- Labels:
-
Client VPN
Jun 22 2022
12:23 PM
I am looking to see if I can get a bandwidth usage for longer than 30 days. When I go to Network-Wide>Clients, there is a graph that shows which is the perfect view for what I am looking for, however, this only goes up to 30 days. Wanted to see if there is a way to get a 6 month or year view of that graph. I have been seeing some users have setup API reporting, which I am very new to and unsure of the process and on which platforms this works best on. Any direction/documentation would be more than helpful, thank you.
... View more
Jun 22 2022
12:12 PM
2 Kudos
I have found that there are two issues here which one was an end device being problematic; that was the port status change. The second issue is a switch in the network that is the wrong priority and doing a packet trace we found that was the cause of the mac address flap. Upon further investigation and adjusting the priorities we found this issue to have gone away. Appreciate everyones help!
... View more
Jun 14 2022
5:19 PM
Yeah, I have seen it on AP's but on switches is new for me. Thank you for that direction; I will look into seeing if the VLANS are able to talk to each other; or perhaps just layer 3 isolate it and test from there.
... View more
Jun 14 2022
3:04 PM
It is this one single device that is made by Neat called the Neatbar that works in conjunction with a tablet to provide video conferencing for a conference room. The ethernet drop runs from this device all the way to the patch panel and is plugged into port 3, which I moved to another switch on port 28. I know how it looks, but this is one device, connected via ethernet, making these jumps, which makes no sense to me. I moved the connection to another switch and the problem follows. Below is the port config and the new logs.
... View more
Jun 14 2022
12:53 PM
I have connected a new device that allows for video conferencing and it is reporting MAC address flapping. When I looked this up I have seen that this will happen if a device from one port is moved to another quickly. This is setup as an access port on VLAN 200 and for some reason it keeps jumping around to different vlans in the logs which I will post below. Does anyone have any idea why this would be happening? Jun 14 12:39:13 IDF-U20 MAC address flapping mac: EE:15:84:67:A8:B1, vlan: 10, port: 68:3A:1E:A5:70:26/26,68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/26 Jun 14 12:37:31 IDF-U20 MAC address flapping mac: E2:26:16:C0:29:83, vlan: 100, port: 68:3A:1E:A5:70:26/48,68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/52 Jun 14 12:29:01 IDF-U20 MAC address flapping mac: 1A:E1:2F:B4:2B:4B, vlan: 100, port: 68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/14,68:3A:1E:A5:70:26/42 Jun 14 12:29:00 IDF-U20 MAC address flapping mac: 1A:E1:2F:B4:2B:4B, vlan: 8, port: 68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/14,68:3A:1E:A5:70:26/42 Jun 14 12:28:59 IDF-U20 MAC address flapping mac: 1A:E1:2F:B4:2B:4B, vlan: 3, port: 68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/14,68:3A:1E:A5:70:26/42 Jun 14 12:20:21 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 10, port: 68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/46 Jun 14 12:15:35 IDF-U20 MAC address flapping mac: 32:E1:2F:C8:A8:88, vlan: 8, port: 68:3A:1E:A5:70:26/38,68:3A:1E:A5:70:26/52,68:3A:1E:A5:70:26/36 Jun 14 12:15:34 IDF-U20 MAC address flapping mac: 32:E1:2F:C8:A8:88, vlan: 100, port: 68:3A:1E:A5:70:26/38,68:3A:1E:A5:70:26/52,68:3A:1E:A5:70:26/36 Jun 14 12:15:34 IDF-U20 MAC address flapping mac: 32:E1:2F:C8:A8:88, vlan: 3, port: 68:3A:1E:A5:70:26/38,68:3A:1E:A5:70:26/52,68:3A:1E:A5:70:26/36 Jun 14 12:15:21 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 8, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:15:20 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 3, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:15:20 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 10, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:15:10 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 8, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:15:09 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 10, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:15:09 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 3, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:15:00 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 8, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:14:59 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 10, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:14:59 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 3, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:14:50 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 8, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:14:49 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 10, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:14:49 IDF-U20 MAC address flapping mac: 5E:9F:EC:94:C2:AA, vlan: 3, port: 68:3A:1E:A5:70:26/44,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/44 Jun 14 12:13:11 IDF-U20 MAC address flapping mac: EE:15:84:67:A8:B1, vlan: 3, port: 68:3A:1E:A5:70:26/26,68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/14 Jun 14 12:13:11 IDF-U20 MAC address flapping mac: EE:15:84:67:A8:B1, vlan: 8, port: 68:3A:1E:A5:70:26/26,68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/14 Jun 14 12:13:11 IDF-U20 MAC address flapping mac: EE:15:84:67:A8:B1, vlan: 10, port: 68:3A:1E:A5:70:26/26,68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/14 Jun 14 12:11:54 IDF-U20 MAC address flapping mac: 32:E1:2F:C8:A8:88, vlan: 100, port: 68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/42 Jun 14 12:11:44 IDF-U20 MAC address flapping mac: 32:E1:2F:C8:A8:88, vlan: 100, port: 68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/46,68:3A:1E:A5:70:26/42 Jun 14 12:09:35 IDF-U20 MAC address flapping mac: EE:15:84:67:A8:B1, vlan: 8, port: 68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/26,68:3A:1E:A5:70:26/42 Jun 14 12:09:35 IDF-U20 MAC address flapping mac: EE:15:84:67:A8:B1, vlan: 3, port: 68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/26,68:3A:1E:A5:70:26/42 Jun 14 12:09:19 IDF-U20 MAC address flapping mac: EE:15:84:67:A8:B1, vlan: 8, port: 68:3A:1E:A5:70:26/26,68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/26 Jun 14 12:09:18 IDF-U20 MAC address flapping mac: EE:15:84:67:A8:B1, vlan: 3, port: 68:3A:1E:A5:70:26/26,68:3A:1E:A5:70:26/42,68:3A:1E:A5:70:26/26 I also see the below happening. This is an end device so not sure why the port would be shutting down. Jun 14 11:59:20 IDF-U20 Port status change port: 3, old: 1Gfdx, new: down Jun 14 11:53:54 IDF-U20 Port status change port: 3, old: down, new: 1Gfdx Jun 14 11:53:50 IDF-U20 Port status change port: 3, old: 1Gfdx, new: down Jun 14 11:53:48 IDF-U20 Port status change port: 3, old: down, new: 1Gfdx Jun 14 11:53:02 IDF-U20 Port status change port: 3, old: 1Gfdx, new: down Jun 14 11:53:01 IDF-U20 Port status change port: 3, old: down, new: 1Gfdx Jun 14 11:52:18 IDF-U20 Port status change port: 3, old: 1Gfdx, new: down Jun 14 11:42:42 IDF-U20 Port status change port: 3, old: down, new: 1Gfdx Jun 14 11:42:37 IDF-U20 Port status change port: 3, old: 1Gfdx, new: down Jun 14 11:42:25 IDF-U20 Port status change port: 3, old: down, new: 1Gfdx I tried looking up information on both issues and I can't find anything that seems to fit the issue I am experiencing. Any help would be greatly appreciated.
... View more
Labels:
- Labels:
-
Interfaces
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 582 | Aug 12 2022 7:34 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 4445 | |
| 1 | 582 |
© 2024 Cisco Systems, Inc.
