Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Become a member of the Cisco Meraki Community today
Get answers from our community of experts in record time.
Join now- About Lorenzo1
About Lorenzo1
Lorenzo1
Here to help
Member since Apr 26, 2023
Jul 18 2025
Community Record
10
Posts
3
Kudos
0
Solutions
Badges
Jul 17 2025
2:24 AM
The problem relates to failure to establish a VPN connection to Azure for Enterprise services such as AD. Whether the user is on-prem or not (at home), a tunnel is established and is 'always on'. Microsoft have investigated their terminating infrastructure and report no utilisation issues. We have no reported issues with browsing, email, Teams apps and plenty of bandwidth at the office egress. Therefore, I'm looking for pinch points that appear to relate to the number of end users behind an MX. We don't have the same issue at an identical office with a lower occupancy.
... View more
Jul 16 2025
9:16 AM
I was clinging by a thread to the slightest possibility that there might be some commonality between Meraki Client VPN (using L2TP/IPsec) and the native Microsoft Client which uses IPsec or SSTP. But sounds as if there none.😕 In my mind I was trying to explain why I don't have the issue at an identical site but with lower occupancy. That's 500+ compared with sub 500. No other reported performance issues and Microsoft have confirmed no issues on the terminating VPN side.
... View more
Jul 16 2025
3:34 AM
Hello, I have a significant number of users behind an on-premise MX 450 that use the Microsoft Native VPN Client to provide an 'always on' VPN connection into MS Azure. I note that within the Meraki documentation that the native Meraki Client has a maximum of 500 users. My assumption (right/wrong) is that the both Meraki and MS VPN Clients will function similarly, therefore is that 500 limit applicable to native MS clients? My thinking is that maybe port exhaustion is being incurred as early arrivers at the office have no VPN issues, where as those arriving late struggle to get a connection. Any thoughts appreciated.
... View more
Labels:
- Labels:
-
Client VPN
May 3 2025
9:06 AM
Unfortunately, they are separate departments of the same public organisation that consume the same external authentication service provided to all public organisation. The irony is bit we're using meraki and coexisting before one changed vendor and I suspect probably went to WIFI 6. Thank you to all who replied I really appreciate you taking the time to reply and share your knowledge and experience 🙏
... View more
May 1 2025
7:34 AM
I have two separate departments of the same organisation on adjacent floors using the same SSID. Depending on physical location the SSID of the adjacent floor is picked up, which incidentally uses a different IP range. I can not change the SSID name as its provided by an external orga nisation. Is there a mechanism block the broadcast of the SSID from an AP on the adjacent floor or is manipulation of RF the only option? I don't think Air Marshall can do anything in this situation. Look forward to any suggestions. Thank-you.
... View more
Labels:
- Labels:
-
Interference
Jan 3 2024
9:08 AM
Hi everyone. I've followed numerous threads on the subject , but I just wanted to check I've understood the replies correctly. If I have a cloud based threat & vulnerability scanning solution, it's not possible to white list the IP to allow Port scanning device subnets on the LAN side of an MX?
... View more
May 12 2023
12:49 PM
1 Kudo
Hi everyone, Wow so impressed with the community pages and helpful content I just had to join. I'm new to Meraki, but have been in Networking for many many years. If I say I remember bee stings taps, you'll get the picture. Now working with a Client that uses Meraki, so looking to deepen my knowledge on this excellent platform. Great to meet you all.
... View more
Apr 26 2023
6:54 AM
Thanks for the reply, looks like I'm out of options for this particular set of conditions.
... View more
Apr 26 2023
4:19 AM
Apologies, if this question is going over old ground regarding inbound rules on an MX, but I'm new to meraki and still wrestling with some of the differences with a traditional L3 FW. I have a requirement to use a cloud based threat & vulnerability scanning tool to scan branch office networks via non meraki vpn peers (Azure), with the branch infrastructure being MS switches and MR AP's. Given that 'All Ports' will be need to be open for the scan operation, am I right in thinking that port forwarding isn't the answer, as it's not possible to forward a single TCP or UDP port to multiple LAN devices using port forwarding? Appreciate any advice.
... View more
Labels:
- Labels:
-
Firewall
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 957 | |
| 1 | 3653 |
© 2025 Cisco Systems, Inc.
