Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About meraki-newbie
meraki-newbie
Here to help
Member since Apr 9, 2023
Online
Community Record
29
Posts
0
Kudos
0
Solutions
Badges
yesterday
hopefully Catalyst 9400 could be monitored from Meraki Dashboard, like another Catalyst 9200/9300/9500 families.. this will be another breakthrough.
... View more
yesterday
Dear meraki Community, I want to deploy Catalyst 9404 as Core Switch by connecting itu MX250, Could Catalyst 9404 Series to be Monitored on Meraki Dashboard? Thank you
... View more
Wednesday
When applying below flow preferences configuration, I couldn't config destination using URL and alert appears when i want to save it my question is, could Meraki perform to configure Destination using URL/domain using certain menu/configuration? and decide which uplink preferred like my old FS router below : thank you
... View more
Labels:
- Labels:
-
Other
Wednesday
so it means, when using virtual uplink, it will much easier connect non-meraki vpn peer with, just peer with single VIP only ?
... View more
Tuesday
When applying warm spare on MX, there are two choice of Uplink IPs, : Use MX uplink IPs Use virtual uplink IPs there are some questions in my head, what is the difference from those two options? what is difference of behavior between those two options ?
... View more
4 weeks ago
"The MX requires unique IPs on the WAN side. So, one for MX1 another for MX2 and a third optional one for the VIP." Could I use private IP for vIP ? rather than public IP as vIP ? "The LAN side works differently. There are just VLANs and their associated L3 IPs. No per MX IP, nor a VIP. The single IP per VLAN will belong to whichever MX is primary." So is that mean, i just need these configuration below ? : Create Interface vlan 255 10.10.255.1/30 on MX1 and MX2 Create mode access vlan 255 on port 2-3 towards LAN side Create Interface vlan 255 10.10.255.2/30 on Firewall side Create static route between MXs and Firewall
... View more
4 weeks ago
Got it, will be applied vIPs for each ISP connection. "Also, the diagram mentions 10.10.255.x/29 in a few places. So I'm not entirely sure where that's being used or if it's just a generic reference. On the MX we refer to the VIP as the shared WAN IP(s) and not any LAN side L3 interface/SVI." yes my purpose like having VRRP for LAN side using 10.10.255.x/29 segment. Much like having HSRP and use IPs on : MX1 10.10.255.1, priority 100 MX2 10.10.255.2, priority 90 MX Standby IP 10.10.255.3 Firewall 10.10.255.5 So traffic from INSIDE (GCP)/LAN side will have an MX Standby IP 10.10.255.3 as next hop to the OUTSIDE (ISPs) And traffic from OUTSIDE (ISPs) will have an Firewall IP 10.10.255.5 as next hop to the INSIDE (GCP)/LAN side Could i applied that scenario above ? because it still confusing me, as there are no exact documentation to applied Layer 3 redundancy on LAN side
... View more
4 weeks ago
got it, so it means i could applied with this topology design below? as long peer switch device could run STP to block looping
... View more
4 weeks ago
so, is that means we need to have another IP public to be used on our Firewall ? and we need to have this public ip configured : x.x.x.x/29 (ISP-A) allocation : x.x.x.1 > ISP side x.x.x.2 > MX01 x.x.x.3 > MX02 x.x.x.4 > vIP Heartbeat x.x.x.5 > Firewall y.y.y.y/29 (ISP-A) allocation : y.y.y.1 > ISP side y.y.y.2 > MX01 y.y.y.3 > MX02 y.y.y.4 > vIP Heartbeat y.y.y.5 > Firewall as mentioned on this link below https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair#Routed_Warm_Spare :
... View more
4 weeks ago
Hello all, Currently we have plan to deploy VRRP between MX85 in our DC, as drawn below : dc plan Expected traffic flow : GCP > Forti Firewall-01 <static route> MX vIP > ISP on MX85-01 (load balance) > Internet/VPN Meraki Remote Side Internet/VPN Meraki Remote Side > ISP on MX85-01 (load balance) <static route> Forti Firewall-01 > GCP we want to have full redundancy for both traffic direction by using VRRP, but there are some doubt in my head: Could we use private segment for VRRP ? If we could run private segment for VRRP, could we run only 1 segment VRRP only for 2 ISP on each MX85? Or should we define different private segment vIP for each ISP ? such as : vIP segment ISP-A : 10.10.255.0/29 vIP segment ISP-B : 10.20.255.0/29 Or we should have to request more public segment from each ISP, to be used as VRRP for each ISP? thank you
... View more
Feb 5 2024
12:08 AM
we thought UNII 1 and 2 not permitted in our country, since it's already permitted, could by using UNII 1 and 2 would reduce channel utilization ? currently we have average 40 clients on a AP
... View more
Feb 4 2024
8:48 PM
We have an experience with high channel utilization as captured below and we experiencing slow connection with high latency. we have already activate CLIENT BALANCING in purpose to reduce these high channel utilization, but high channel utilization still occurred and still experiencing slow connection with high latency... should we do another approach to resolve this condition ?
... View more
Labels:
- Labels:
-
RF Spectrum
Nov 20 2023
6:25 AM
so, is that mean when i want to add new role such as "MONITOR", it will use the same SHA1 tokens as "USER" and "ADMIN" ?
... View more
Nov 20 2023
5:48 AM
another question is, should the role on IDP defined before tokens generated? for an example, if i have already create role "ADMIN" on my IDP (Jumpcloud) then generate SHA1 token, and filled it on meraki dashboard. and in another moment, i need to add new role "USER" on my IDP, should i generate the new SHA1 token? and filled it again on meraki dashboard?
... View more
Nov 20 2023
4:22 AM
yep, it's seem pretty easy, but still lack of documentation, for jumpcloud step couldn't get as clearer than setting up on ADFS/Azure.. hopefully could have more details guides like this : https://www.miniorange.com/cisco-meraki-single-sign-on-(sso) cheers
... View more
Nov 20 2023
4:16 AM
Could we add different user roles using single X.509 cert SHA1 fingerprint ? or we need to create another IdP for different roles? such as ADMIN role will be using X.509 cert SHA1 fingerprint AAAA USER role will be using X.509 cert SHA1 fingerprint BBBB thanks
... View more
Labels:
- Labels:
-
Administrators
Nov 16 2023
11:06 PM
Dear All, we want to using Jumpcloud as a SSO portal before login to meraki dashboard... Is there any clear guide for Jumpcloud and Meraki side setup? thanks
... View more
Nov 6 2023
12:49 AM
Alright that's very clear. but for another question is, could we configure interface vlan and default route from the MS410 to Forti, using Local Status page ? due to our ISP installation is on going
... View more
Nov 5 2023
11:42 PM
Dear All, We want to deploy MR 46 AP > MS 350 ACCESS SWITCH > MS 410 CORE SWITCH > SDWAN Router Fortinet 600E There are several question, : What is the best possible, using MS 410 CORE or SDWAN Router Fortinet 600E as user+management gateway ? If we could implement this topology above, is that NAT will be performed at Fortinet level ? due to there are no MX SDWAN Appliance.. so all MS and MR switch management will be NAT at Fortinet ? thank you
... View more
Nov 5 2023
6:00 AM
Dear all, we want to create MS410 as an Core Switch for any user gateway, Could we create Interface Vlan as user Gateway on MS410 ? If we could, then how to configure it? is that using localpage or we need to add the MS410 to the dashboard before?
... View more
Labels:
- Labels:
-
Layer 3
Aug 10 2023
8:42 PM
Hello all, we have some issue that, we couldn't see any dot1x event log on Dashboard for MS390-48UX2, though we could see the dot1x event log on MS125-48FP model. Is there anybody has the same problem ? Thank you
... View more
May 11 2023
1:21 AM
we have already disable web cache as TAC suggestion, but it didn't resolve
... View more
© 2024 Cisco Systems, Inc.
