Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About thaack
thaack
Here to help
Member since May 3, 2023
Monday
Community Record
13
Posts
25
Kudos
0
Solutions
Badges
Mar 12 2024
6:26 AM
2 Kudos
Allow captive portal remediation Many facilities that offer Wi-Fi and wired access, such as airports, coffee shops, and hotels, require the user to pay before obtaining access, agree to abide by an acceptable use policy, or both. These facilities use a technique called captive portal to prevent applications from connecting until the user opens a browser and accepts the conditions for access. If always-on VPN is enabled, the connect failure policy is closed, captive portal remediation is disabled, and Anyconnect detects the presence of a captive portal, the AnyConnect GUI displays the following message once per connection and once per reconnect: “The service provider in your current location is restricting access to the Internet.” “The Anyconnect protection settings must be lowered for you to log on with the service provider. Your current enterprise security policy does not allow this.” Captive portal detection is enabled by default, and is non-configurable Captive portal remediation is the process of satisfying the requirements of a captive portal hotspot to obtain network access. By default, the connect failure policy prevents captive portal remediation because it restricts network access. You can configure AnyConnect to lift restricted access to let the user satisfy the captive portal requirements. You can also specify the duration for which the client lifts restricted access If the connect failure policy is open, users can remediate captive portal requirements. The captive portal remediation feature applies only if the connect failure policy is closed and a captive portal is present. KB Article
... View more
Dec 27 2023
6:46 AM
Right - I understand, but my questions still apply. How was the device added to ABM (configurator?) Confirm in Apple Business Manager that the iPad is assigned to the correct MDM server for Meraki. In Meraki go to Systems Manager > ADE and confirm the device appears after hitting "full sync" in the upper righthand corner. Select the device and ensure it also has the correct "settings" assigned for setup assistant. If all above is correct, attempt to restore the iPad using iTunes and recovery mode and attempt to enroll via setup assistant again.
... View more
Dec 26 2023
12:42 PM
Is the iPad up to date? Have you tried restoring the iPad? Was the iPad previously owned by another organization?
... View more
Oct 5 2023
6:12 AM
1 Kudo
On SM v. Intune We used to have a ton of iOS devices in Meraki SM and we recently migrated them to Intune. Our configuration is pretty basic and was far easier to set up in SM than Intune.
... View more
Aug 22 2023
5:51 AM
Me as well... Hoping that it is supported in the future.
... View more
Aug 21 2023
8:32 AM
I have a few MX 84 appliances managed by a configuration template. We were recently looking to implement AnyConnect to replace the existing L2TP VPN. I found it a bit odd that the AnyConnect tab had never shown up to our Client VPN settings page yet even during the AnyConnect beta. Before buying the licensing, I wanted to ensure that our MX84's would be able to work with AnyConnect. I reach out to support and was told that AnyConnect is currently not supported with MX's that are managed by a network template. I don't mind unbinding the MX's that we want to use AnyConnect with from the template, but it is my understanding from my conversation with support that that can cause some issues and or network downtime. Are there any current plans in place from the Meraki team to add AnyConnect support to MX appliances managed by a configuration template? It would be helpful to know before attempting to remove the appliances from the template, but almost anything is better than that god forsaken Windows built-in VPN client at that point so I'm not sure how much longer I can wait haha! Thanks, -T
... View more
Labels:
- Labels:
-
Other
Jun 30 2023
9:23 AM
5 Kudos
Always loved this classic. I'd tell you a joke about UDP, but you probably wouldn't get it...
... View more
Jun 16 2023
2:39 PM
15 Kudos
Winner winner chicken dinner.
... View more
Jun 2 2023
8:31 AM
1 Kudo
I'd reach out to your ISP to see what options you may have. Outside of @alemabrahao 1:1 NAT solution I can't think of anything else off the top of my head.
... View more
Jun 2 2023
8:06 AM
Can you setup IP Passthrough on the ISP's router?
... View more
Jun 2 2023
7:56 AM
1 Kudo
If you are using IPsec, can you use the hostname in the Client VPN settings?
... View more
May 3 2023
12:41 PM
The Meraki MG 51 and MG 51E support 5G. The MG Cellular Gateways have a IP67 rating, so you can chuck them outside, getting better signal than a MX-C. Cloud-Managed 5G Cellular Gateway | Integrated Antenna | MG51 | Cisco Meraki
... View more
May 3 2023
12:28 PM
Hey VPNL2TP, What version of windows are your endpoints running? I agree with @alemabrahao that you should eventually move to Anyconnect. Windows updates seem to break the windows built-in VPN client frequently. I'd had success with editing the IPSEC registry subkey by adding the "AssumeUDPEncapsulationContextOnSendRule" DWORD and setting it to 2. Below is the link to the Microsoft Documentation that describes this process: Configure L2TP/IPsec server behind NAT-T device - Windows Server | Microsoft Learn
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 15 | 13510 | |
| 5 | 8224 | |
| 2 | 297 | |
| 1 | 691 | |
| 1 | 1491 |
© 2024 Cisco Systems, Inc.
