Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About rellek
rellek
Comes here often
Member since Aug 16, 2022
Mar 6 2024
Jeff Keller
Community Record
12
Posts
0
Kudos
0
Solutions
Badges
Jan 30 2024
10:30 AM
I am logged in with an email address, password, MFA, and a full administrator, and I am still not able to generate an API key. There's an option in the Organization settings way at the bottom to enable the API Generation. No one can do it until that's saved!
... View more
Sep 28 2023
4:51 AM
Thanks Philip. The info on the cached page I posted a link too makes it sound possible with this option. My understanding is that when the DNS server saw the Option 81 data in the packets, it would see it and add it to the database. I could be wrong, I have been once before I think! 😉
... View more
Sep 27 2023
11:48 AM
No matter what you actually format the value in... I don't know if I even have the correct value. From a cached google page I was able to find something, but I don't know if it's right. I tried doing a packed capture, but I get no dhcp or dns results to the dns server ip. IF the value I need is "23" the MX doesn't seem to care how it's typed. ALL of these examples equal the same. If you have any 2 of these in there, it gives an error that it's a duplicate:
... View more
Sep 27 2023
11:23 AM
That doesn't really help. If you look up any of the documentation, it's boggling: The format of the Client FQDN option is:
Code Len Flags RCODE1 RCODE2 Domain Name
+------+------+------+------+------+------+--
| 81 | n | | | | ...
+------+------+------+------+------+------+--
The above figure follows the conventions of [12].
2.1. The Flags Field
The format of the 1-octet Flags field is:
0 1 2 3 4 5 6 7
+-+-+-+-+-+-+-+-+
| MBZ |N|E|O|S|
+-+-+-+-+-+-+-+-+ Wireshark shows hex values similar to these, Microsoft used DWORD values. I'm lost on this one.
... View more
Sep 27 2023
9:53 AM
I want to implement DHCP Option 81 to relay to a local bind 9 DNS server that I have running to dynamically update it's database. The documentation is horrific on how to set the value. Can anyone help?
... View more
Aug 17 2022
4:26 AM
The 172.16.0.1 is a Sophos firewall that we are required to have by a customer. I made a static route in the HUB MX but it just made the downstream stop working too.
... View more
Aug 16 2022
12:19 PM
I sure do. How the heck do I fix it! lol So, the IP for the MX is 172.16.0.230, but the gateway is 172.16.0.1. I tried to make a static route but it didn't help.
... View more
Aug 16 2022
8:56 AM
I can ping the HUB MX gateway IP at 172.16.0.230. If I do a tracert, that's as far as it gets.
... View more
Aug 16 2022
7:30 AM
172.16.0.204 is the domain controller. It allows icmp and will reply. I have captures of the VPN traffic, yes.
... View more
Aug 16 2022
5:59 AM
Thanks for the reply. I don't see any mention of ESP in the dashboard anywhere. How could I check that?
... View more
Aug 16 2022
5:20 AM
Hello community! I have been struggling with a situation getting AutoVPN to work properly after several attempts with help from Meraki Support who doesn't seem to have the solution. We have an MX67, and MC67C. The MC67C is at a remote warehouse location (branch). The only option available for internet out there is AT&T 4G, which is I why I went with the cellular model. As least that part I got right 🙂 After setting up AutoVPN, I still can not figure out why there is no upstream data. I will try and explain the setup and steps taken: HUB subnet is 172.16.0.0/24 (VLAN5) Corporate network, everything works as expected. I can ping any device at the branch location BRANCH subnet is 172.16.100.0/24 (VLAN100) 4GLTE is configured with custom APN. This was set up to alleviate the restricted NAT type. Internet and internal connectivity works as expected PC's are unable to reach anything over the VPN so they can not log into the domain If I send a ping from the branch to the hub and capture the packets, it looks to me like the ping is reaching the target, being sent back, but NOT being received? 69 4.942286 172.16.100.14 172.16.0.204 ICMP 60 Echo (ping) request id=0x0001, seq=9/2304, ttl=127 (no response found!) I've checked firewall rules, added extra rules to allow traffic, dug though setup documents, contacted support, added static routes, source based static routes... nothing seems to help. Does anyone have an idea of what I might have missed? Where else I could check?
... View more
Labels:
- Labels:
-
Auto VPN
© 2024 Cisco Systems, Inc.
