Hello Guys, we have SD-WAN scenario, where customer added a WEB server to spoke location and wants to access to this server via public IP on HUB and port 8080. All traffic is routing to the internet via HUB Public IP(one exit point to the internet for entire organization). We have tried to do port forwarding on HUB location, where all incoming port(8080) should be forwarding to SPOKE location IP address 192.168.15.2, but this is not possible to add.(This IP address is not existing on local subnet). Is this behavior ok? I think that this is quite normal scenario.... VPN is active, route is present in routing table..... Is some workaround for this???     ... View more

Hello guys,   i would like to ask about your help. I am depolying sdwan customer with 18 sites and maybe in 11 sites are active cellular link. Cellular is primar active link and one cable link is for failover(cable is not my link). Everzthing seems to be ok, but in all network status is showing this sites with yellow dot.(alerting)...Only alert which is there is that cellular is active, what is in my case ok. Is this status ok? Should be like this, or it should be green(in this case are green sites without active cellular)? When i open yellow site, in details is green dot... And in organisation summuary is everzthing green... Thanks for replies 🙂 ... View more

Hello guys, i am going here for advice. I have a project where is planning MX75, 3Meraki switches and 19APs(MR28)....but this will be done in summer. Now i am trying to configure IPSK without radius and there is still some problems. My lab is(MR67 + MS120(8port POE)) and 1xMR28. Topology is very simple and links between devices are trunks(with all vlans allowed). My problem is with configuration IPSK. Goal is have one SSID, but with 18-20 different passwords.(per apartments)  I have done it, but it does work for while. Configuration is not complicated, i cant see any problem. I have done 3 testing groups, with 3 different passwords. Vlans are also created on MX(vlan10,vlan20,vlan30). I have done config with vlan tagging, also without. For a while it was working, but with configuration pain(for example Wi-Fi Personal Network (WPN) enable/disables problems)- if enabled- it should be allowed communication only between devices in same group, but not(it is like client isolation and nobody in groups cant see other, only internet working). If disabled, can communicate devices between every group. But this can be solved in firewall section.... After day, i disabled this ssid and today i wanted to test devices and they couldn't connect....I looks like totally unstable. I have done config with tagging, also without tagging. I have tried tagging in groups(under wifi section), but devices have still problems....Do you have any idea? Or is here somebody,  who has this feature implemented and working reliable? version of my MX is 18.205 and MR28 is 30.6 , thanks a lot for advices.   Juraj. ... View more

Hello guys,   i would like to ask for a advice. I have more sites, where are strange RSTP logs and behavior. Network logs showing that more ports are RSTP affected. In three different location. I am 100% sure, that all 3 location are loop free(without loop). One location is very simple. Only MX75 and two switches directy connected to LAN port of MX.(I know about MX does not participiate in STP, but only two switches, so it cannot be problem). Next location si also without loop. but logs are there. Very often is showing RSTP logs to access port. IS this behavior normal? What can generate this port RSTP logs?? I dont want to see logs if computer/TV going to sleep or some access port is flapping. If there is not BPDU with combination of MAC address it should not be logged as RSTP....am i wrong? Thanks for your replies and advice. ... View more

Hello Guys, maybe somebody can help me. I want to use on my MX67W passtrough mode, but it works really strange. My topology isquite standard. In company is Mikrotik router and behind him switches and vlans. I cant change topology of swithces and do chcnges there. But we want to do same security features in network, like IPS/IDS and visibility of network. Therefore i want to add meraki MX between router and core switch in passtrough mode. Router >> MX >> Switch. I dont know which port to use, or how it works, If I use Meraki WAN port like upstream to Router, and LAN port to Switch, everything works, but there is terrible speeds(troughput in network), like 7-9 Mbs, Dashboard is ok, connection to dashboard working, security works...but speed problem. Therefore I have tried to use LAN port to upstream router and lan port to downstream switch.In this topology, speeds were normal, like expected, but Dashoard was inreacheble(no management IP address, which i understand). So i have tried 3rd option. Where i have used MX lan port to router, mx lan port to downstream switch and WAN port to upstream router as management port. In this config is problem as well. Because of RSTP. Everytime if i connect second link to upsteram router(LAN and WAN), it will create LOOP and one port is blocking.(even if i chose different vlan IP) Is here somebody who know how it works? I dont know physical connection of MX passtrough. In standard devices should be like two lan ports and some management IP, but in meraki id does not work like that... I am really confused about it. Thanks for any advice. Juraj. ... View more