Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About NickKova
Community Record
26
Posts
8
Kudos
2
Solutions
Badges
Mar 11 2024
9:22 AM
Hello guys, Thank you once again for your time and effort. Just to note, I marked @rhbirkelund answer as solution, as I already tried everything as @rhbirkelund, but was still having issues. Seems that the problem was faulty switch, that is all. No matter how you set up: On the uplink port of the Switch to the MX you set the Native vlan to 1, and allow vlan 90 (and others) if so. On the port connecting to the VoIP phone you either; * set it to switchport type trunk with vlan 1 as native and vlan 90 as tagged * set it to switchport type access on vlan 90 * set it to switchport type access on your data vlan and voice vlan to 90. It should work and works on all switches except on the one that by coincidence I was using for testing. Thank you very much, hope this helps someone else in the future. You guys are awesome💪.
... View more
Mar 7 2024
2:03 PM
Thank you. I have some phones that were connected and working on default VLAN1 before this deployment, and now I am doing changes to get the phones to separate VLAN. So I can see in Meraki there are still leases for VLAN1 for some of the phones. As there is no clear step to revoke leases in MX 105 other than rebooting the device, I will reboot the Meraki and see what happens. Thing is I have been doing before on other deployments same way without issues. Like setting native VLAN on each switch port intended for phones to VLAN for VoIP (VLAN 90) and it worked - it is same as if I set switch port native VLAN to NONE and set custom tagged to VLAN for VoIP (VLAN 90) and LLDP turned on with Voice VLAN set to VLAN 90. But here something is not right, so I will get back after rebooting the Meraki - afterhours.
... View more
Mar 7 2024
11:13 AM
Ah ok, so if I revert native back to default on switch port(s) for the phone, what should I set here: I appreciate your time and help, thank you!
... View more
Mar 7 2024
10:32 AM
Thank you very much for your reply. Here are pics for switch port and uplink port on the switch:
... View more
Mar 7 2024
10:22 AM
Hello, I have setup of couple of Unifi switches, along with Meraki firewall. Meraki firewall has 4 VLANs one default with ID 1, and following VLANs with their respoective IDs: ID 10, ID 50 and ID 90. All Unifi switches are connected through uplink ports, and a first, all switch ports were configured to have native VLAN 1. Now I have set up DHCP server for each VLAN in Meraki appliance. I am getting proper DHCP IPs for native VLAN 1, meaning default network. But when I change port profile to have native VLAN for example 90 on one of the switch ports, no DHCP IP gets assigned to the device (phone). What could be a problem? Port 5 on Meraki is connected to one of the switches and configured as trunk with all VLANs allowed. Pictures are attached: Oh, and as additional information, I got some devices getting IPs for VLAN 90, but not all, even after power cycling the switch ports and rebooting the devices - phones, they are not obtaining IP addresses. I tried with the laptop, and it is assigning APIPA address.
... View more
Dec 5 2023
2:40 AM
2 Kudos
Ok, sounds good. Than you!
... View more
Dec 5 2023
2:36 AM
Yes, those 2 devices have proper default VLAN IPs assigned, and they are online, no issues with them.
... View more
Dec 5 2023
1:33 AM
Thank you guys, for your time and response. Thing is I am not sure how those devices can have APIPA address when DHCP from Meraki is working without issues. I have Unifi switch and all ports are configured with default profile targeting default VLAN with proper DHCP. That is what I do not get how is that possible.
... View more
Dec 4 2023
1:32 PM
Hello, Have bunch of events logged in MX64 event log, for 2 different devices, reachable over network with each having proper DHCP IP from default VLAN and pingable. Have one default VLAN 192.168.16.0/24 and Guest VLAN192.168.9.0/24. Can anyone elaborate on this, perhaps, what could be the cause for those events? I would really appreciate.
... View more
Dec 4 2023
12:52 PM
Hello, Thank you very much for your time and response.
... View more
Dec 4 2023
7:00 AM
Hello everyone, Hope I can get some help on this. We have domain controller acting as DNS server behind MX64 appliance. There are only 2 Layer7 firewall rules, denying All Gaming and P2P traffic. Recently we have been having issues with some users getting intermittent network issues when connecting remotely through RDP sessions. Upon checking firewall logs, we found out that DNS server is being blocked on different ports (like 65037, 65260, 64395) ports corresponding to PID process ID with the number 2360, which is a DNS service dns.exe from the Windows server. I was thinking of creating a group policy on Meraki and applying to the server as a client. Can someone provide any information on how to properly set this group policy, any thoughts? Any help is greatly appreciated.
... View more
Guys, sorry for a bit late reply. I eventually resolved the issue once I got onsite. Problem was that I was misinformed and there were 2 Unifi US-48 switches onsite, and I saw only one adopted in UnifiController. Meraki appliance was directly connected to that non-provisioned Unifi switch. Once readopted and reprovisioned, all started working again. You have been very helpful as always, take care guys.
... View more
Thank you very much for all your advices. I am supposed to go on site in few days and will test. I really appreciate your help guys!
... View more
Ok I can do that, will let you know. Have to go onsite to test with laptop. Thank you very much.
... View more
Thank you very much for your response. Topology consist of multiple APs connected to Unifi switch, and that Unifi switch is connected to SG300, and SG300 switch to Meraki MX 64 firewall appliance. I did not try connecting laptop directly to SG300, will try that, but to note all ports on SG300 are "trunk" ports not "access" ports. Also I would like to note that for default VLAN 192.168.1.0/24 I have disabled DHCP on Meraki, as I am using DC with DHCP role for this, and devices are getting proper IP from DHCP pool, from that DC server. It is just that somehow WiFI clients connected to AP's to Public WiFi are not getting DHCP IPs from Meraki for VLAN 55 (192.168.55.0/24).
... View more
Nov 15 2022
6:33 AM
Hello, I am hoping someone with enough time and patience will be able to help me with this problem I am having. My topology is as follows: Have UniFi AP connected to UniFi switch -> also from that switch (US-8-150W) I have connection to Cisco SG300 switch, -> and from that switch connection goes to Meraki MX64 firtewall appliance. Now on UniFi controller, I have configured VLAN 55 Guest network with VLAN ID 55 (192.168.55.0/24), and assigne this network to WiFi Guest Public network. All ports on all UniFi devices are set to "ALL" profile, passing packets for all VLANS (I have default VLAN 192.168.1.0/24). On SG300 I have 2 VLANs created VLAN 1 and VLAN 55. All ports on Cisco switch are set as "trunk", untagged for default VLAN and tagged for VLAN55. On Meraki I have 2 VLANS set, 1 and 55, and all ports set to "ALL" profile. I have DHCP enabled for VLAN 55 on Meraki, and problem is when user connects to public guest WiFi, connected device resolves to APIPA IP, not getting IP from DHCP. Cisco SG300 is in Layer2 mode. Additional screenshots attached, so I hope someone can help. Thank you!
... View more
Sep 26 2022
10:04 AM
2 Kudos
Hey guys just to let you know, issue has been resolved. You helped me tremendously. While I was slowly analyzing packets from .pcap file, I have noticed that TCP conversation was always incomplete, and (so stupid of me did not check this before, but I guess you sometimes miss the trees while looking into the woods 🙂 ) did not look at the Layer7 firewall rules on Meraki. It looked like app requested P2P to be allowed, so once I enabled P2P traffic, app started working. Thank you all for joining in this topic and for your help. Best whishes for all of you guys!!!
... View more
Sep 26 2022
5:41 AM
Sep 26 2022
5:17 AM
Topology consists of one Unifi 16port switch, Meraki MX appliance, with 2 setup VLANs. I tried with enabling IGMP snooping on 10.0.0.0/24 network, same result. Picture I posted for IGMP was just downloaded from internet, so just to clarify, 2 VLANs are 172.16.20.0/24 and 10.0.0.0/24. CCTV server resides on second VLAN (I am really sorry if I made confusion for you guys with that picture - also I noticed I mistyped in first post network details regarding first VLAN - it is 172.16.20.0/24). Devices from first VLAN can ping devices on second VLAN, and can access web service for CCTV server at 10.0.0.9:8081 without problems. It is just the app that uses 22609 port and it is not working.
... View more
Sep 25 2022
1:39 AM
2 Kudos
I can try enabling IGMP for second VLAN (never mind IP shown in pic, I just downloaded pic)
... View more
Sep 24 2022
12:08 PM
Also forgot to mention, on servers Win firewall, port 22609 is allowed for inbound as TCP and UDP, with allowed edge traversal.
... View more
Sep 24 2022
8:48 AM
Thank you. Yes i can ping server. What troubles me is that inter VLAN connection works on port 8081, that is reserved for web service. Also, in servers VLAN, all computers can use both ports for access, 8081, and app port 22609.It is just that somehow 22609 is not available from other VLAN. I can ping server from any VLAN. 8081 web access works from any VLAN. People are used to app, so that is why I am looking for solution.
... View more
Sep 24 2022
6:17 AM
Thank you very much alemabrahao. When you say packet capture, do you mean like I use wireshark, and install on the server?
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 1578 | Dec 7 2022 9:41 AM | |
| 3342 | Sep 26 2022 10:04 AM |
My Top Kudoed Posts
© 2024 Cisco Systems, Inc.
