About RH6379

Net-Dave · ‎07-11-2020

Wow.. that's crazy! I am less than impressed with that decision from Cisco. I have 5 site to site vpn's setup and my full network is exposed to them when I want to restrict their access to a couple of internal ip addresses...?? Come on Cisco , you should know better!

ErazoR · ‎03-05-2020

Thanks for responding. I guess my next question is I have a MS-220 and a couple of MR55. Do I really need buy the Meraki firewall or does the switch provide me with some internal security at all? Or can I use my AX11000 ROUTER as the firewall? Your thoughts would be appreciated.

RH6379 · ‎12-12-2018

We swapped out our MX84's for MX100's and it happened with 2 MX100's in an HA configuration. Meraki does not recommend a direct connection for heartbeats between the 2 MX devices any longer. We now have 2 MX100 devices with the HA one powered off. This is ridiculous.

RH6379 · ‎11-20-2018

We weren't able to ping the DNS servers or run an nslookup against them. After further investigating, the CheckPoint firewall wasn't seeing communications from that IP coming over the tunnel so the rules dropped that. Also, there was a high number of dns queries coming in so it got flagged by the checkpoint as suspicious activity. The CheckPoint sees the new IP of the laptop as coming over the tunnel so it's being allowed. @mat1458 wrote: If the MX is the DHCP server the incomplete ARP is not likely to be the issue since the traffic is routed and ARP is only necessary for the default gateway IP address in the local VLAN. It looks to me as if something in the DHCP processing on the client side as gone wrong. Did you do an ipconfig /all (or whatever the OS of the client might need to display the IP config) to see if the DNS servers and the Default Gateway were present in the PC? If everything is/was ok, could/can you ping the DNS server? Are you able to able to ping devices in proximity to the DNS server?

RH6379 · ‎09-24-2018

Can I create a template for switches and not have to include MX devices? I have 2 networks bound to a template and I recently was asked to create a vlan specific to one of those networks on the MX84 which is where all of our VLANs are defined. If I create the VLAN for the one network, it'll be created on the other and we don't want that. I've been asked to change a few settings on the MX84 so I wanted to keep those individually configured and just have a profile for the switches and APs since that one-off VLAN would not be configured on or used by the switches.

BrandonS · ‎09-14-2018

I agree with Adam. I would not expect that to work. Printers and shares on a different VLAN need to be addressed directly by IP.

RVilhelmsen · ‎08-24-2018

the cobber interfaces is Marvell Alaska V 88E1680 chips and the fiber is Marvell 98DX3233A1. Maybe marvell has some spec. pdf. The SoC in a Microsemi SmartFusion2 - https://www.microsemi.com/product-directory/soc-fpgas/1692-smartfusion2 Memory is SK hynix - https://www.skhynix.com/products.view.do?vseq=913&cseq=74 and Nand flash from Spansion. It´s all the same hardware in the 120 series and nothing home grown. All bougt from other venders. https://www.rovi.dk/meraki-ms120-8-switch/

JohnM · ‎06-06-2018

@RH6379 wrote: We're installing 12 MS-120 switches in a remote office and the switches are showing a DNS misconfigured error when we use the IP of the mgmt vlan as the DNS Server. That is configured on an MX84. Is your MX84 not configured as a DNS proxy perhaps? If it's not relaying and returning DNS queries and responses for clients, then the switch isn't going to connect either.

Adam · ‎06-04-2018

Correct, obviously doesn't need to be those ports. Could just as easily be 47/48 or whatever.

RH6379

Community Record

Badges

Re: Inbound Site-To-Site VPN Firewall Rules Are Getting Removed

Re: Netgear Nighthawk Router and MR33 as range extender?

Re: Broadcast Storm Brought Down Entire MS120 Network

Re: PC behind Meraki MX84 could not communicate with DNS servers on other s...

Re: Can I create a switch profile without a template?

Re: SMB Scanning Not Working Between VLANs on MX65W

Re: Do Meraki Switch SFP Ports have a higher buffer than the Copper Ports?

Re: Why do the switches need a public DNS Server to show up as green on the...

Re: Redundant design with non-stackable MS120's and MX84's

Re: PC behind Meraki MX84 could not communicate with DNS servers on other s...

Re: Inbound Site-To-Site VPN Firewall Rules Are Getting Removed

Re: Broadcast Storm Brought Down Entire MS120 Network

Re: Broadcast Storm Brought Down Entire MS120 Network