Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About sjlee
sjlee
Comes here often
Member since May 21, 2023
18 hours ago
Community Record
30
Posts
0
Kudos
0
Solutions
Badges
2 weeks ago
Thank you for reply. Because I'm just wondering.. For example, IKE version is 1 and there are many subnets in Private subnets. Even in this case, can it be included in the above?
... View more
2 weeks ago
Dear I checked meraki MX OS release note and I saw this message in Known Issues. The Non-Meraki VPN service may fail to properly establish IKEv2 tunnels when the MX appliance is acting as the IKEv2 responder and many allowed subnets are configured. In above context,,, 1) "many allowed subnets are configured" -> Is this mean there are many subnets in Private subnets?? 2) "The Non-Meraki VPN service may fail to properly establish IKEv2 tunnels" -> Is this mean It may unstable Non-Meraki VPN tunnel connection and may occur repeatly many Non-Meraki VPN SA event log (down/up) ? Is my understanding correct? I appreciate anyone answer If know. Thank you.
... View more
4 weeks ago
Thank you for reply. Yes, Right. MX75 is connected dual WAN links in Appliance. (Appliance - Spare) I understand that need to keeping only one AWS tunnel for keeping stable private connect with AWS. After I see your context, I recogize that need to keeping only one AWS tunnel for keeping stable private connect with AWS.
... View more
4 weeks ago
Thank you for reply. In the past, I have configured AWS tunnel 2 EA. (Private subnets information was same both tunnel) and actually, It was issue due to 2 VPN tunnels was status up. So, I have changed to keeping 1 VPN tunnel through delete other one tunnel. MX device is already use Public IP address in Internet port. and MX VPN is also performing user gateway role. So, we are not able to compose vMX seperately. I understood vMX is appliance seperate with MX75, Am I right?
... View more
4 weeks ago
Thank you for reply. Configuration is same both with AWS. The VPN tunnel was down for about 15 minutes. Now is normal. The events above were also occured when normal status. └ (To be precise, I think they are logs that negotiate internally for continuous tunnel maintenance.) we already use MX75 device and OS version is MX 18.107.2.
... View more
4 weeks ago
Dear We were experienced Non-Meraki VPN tunnel down between MX75 and 3rd-party(AWS) VPN device. But, we didn't able to check vpn tunnel status down except event message like as below. << Event message >> Time(EDT) Security appliance Client Category Event type Details 2024-04-03 15:58 TEST-MX75 Non-Meraki VPN Non-Meraki VPN negotiation "msg: <remote-peer-3|3445> IKE_SA remote-peer-3[3445] established between 1.1.1.1[1.1.1.1]...5.5.5.5[5.5.5.5]" 2024-04-03 15:54 TEST-MX75 Non-Meraki VPN Non-Meraki VPN negotiation "msg: <remote-peer-3|3436> IKE_SA remote-peer-3[3436] established between 1.1.1.1[1.1.1.1]...5.5.5.5[5.5.5.5]" 2024-04-03 15:47 TEST-MX75 Non-Meraki VPN Non-Meraki VPN negotiation "msg: <remote-peer-3|3434> IKE_SA remote-peer-3[3434] established between 1.1.1.1[1.1.1.1]...5.5.5.5[5.5.5.5]" 2024-04-03 15:47 TEST-MX75 Non-Meraki VPN Non-Meraki VPN negotiation "msg: <remote-peer-3|3288> deleting IKE_SA remote-peer-3[3288] between 1.1.1.1[1.1.1.1]...5.5.5.5[5.5.5.5]" 2024-04-03 15:47 TEST-MX75 Non-Meraki VPN Non-Meraki VPN negotiation "msg: <remote-peer-3|3433> IKE_SA remote-peer-3[3433] established between 1.1.1.1[1.1.1.1]...5.5.5.5[5.5.5.5]" 2024-04-03 15:46 TEST-MX75 Non-Meraki VPN Non-Meraki VPN negotiation "msg: <remote-peer-3|3432> IKE_SA remote-peer-3[3432] established between 1.1.1.1[1.1.1.1]...5.5.5.5[5.5.5.5]" 2024-04-03 15:46 TEST-MX75 Non-Meraki VPN Non-Meraki VPN negotiation "msg: <remote-peer-3|3253> deleting IKE_SA remote-peer-3[3253] between 1.1.1.1[1.1.1.1]...5.5.5.5[5.5.5.5]" 2024-04-03 15:45 TEST-MX75 Non-Meraki VPN Non-Meraki VPN negotiation "msg: <remote-peer-3|3429> IKE_SA remote-peer-3[3429] established between 1.1.1.1[1.1.1.1]...5.5.5.5[5.5.5.5]" Is there any method how to check through event log menu if tunnel status or peer down? I appreciate If you share If you have related information. Thank you, Best Regards.
... View more
4 weeks ago
Dear I recogniz that DPD period in Meraki is like as below. > DPD period : 10 seconds > DPD retrycount : 5 > DPD maximum fail : 5 Our OS version is MX 18.107.2. Can we change DPD time setting in Meraki Dashboard? If there is information related to, Please share to me. Thank you, Best Regards.
... View more
Feb 15 2024
4:40 PM
I was using it as a URL that was set up by default. I don't know at what point it started not working, but I recognized it after the customer asked me, and I didn't change any settings until this point. there is some NAT rule due to something service related to voice. However, regardless of this, the DNS call response worked normally, so there was no problem in trying the Anyconnect SSLVPN connection through the URL. I also change local DNS from Private IP to 8.8.8.8 and tried DNS query. But It was still no working DNS reply.
... View more
Feb 15 2024
4:36 PM
I checked. I already was using it as a URL that was set up by default.
... View more
Feb 15 2024
4:36 PM
I was using it as a URL that was set up by default. I don't know at what point it started not working, but I recognized it after the customer asked me, and I didn't change any settings until this point.
... View more
Feb 14 2024
9:24 PM
Dear I have issue about MX VPN HOSTNAME DNS reply. The local users cannot client sslvpn via enter the URL in cisco anyconnect program. when the local users tried, they receive fail message. but, MX VPN WAN IP address ping was normally working. So, I checked nslookup DNS query,, It was failed. Have you been faced this issue? If right, How to did resolve it? I appreciate If you share it. Thank you, Best Regards.
... View more
Nov 15 2023
5:09 PM
Thank you for reply. We resolved it. Our sites is proceeding migration DNS server from legacy to AWS. According to this, It was issue about DNS and we changed DNS server. now is stable. Thank you, Best Regards.
... View more
Nov 15 2023
12:25 AM
I have an inquiry while operating the network. The customer doesn't have any symptoms on the wire, but the wireless internet is very unstable, so we're checking it. In wireless firewall settings, there is a Peer-to-peer blocking rule in the Layer 7 [Block applications and content categories] - [Layer 7 firewall rules] menu, does this blocking also include DNS request communication? If anyone knows, please share it. Thank you, Best Regards.
... View more
Sep 21 2023
12:53 AM
No, In case of Cisco Duo,, I only use meraki dashboard login 2 factor authentication.. According to our customer's security policy, we need to reset the password of the SSLVPN account on the AD server when it expires, but it seems that the password reset pop-up function is not provided through the anyconnect program. I want to know if there is a way to reset the SSLVPN account password through the anyconnect program. Thank you, Best Regards.
... View more
Sep 18 2023
1:24 PM
Client VPN is set up on the Meraki MX equipment and SSLVPN service is in progress after LDAP connection with the VPN account AD server. I think I heard that the anyconnect program cannot provide a reset pop-up window due to password expiration if a change is needed due to password expiration for the VPN account on the AD server. Actually, I tried it, but the Anyconnect program only redirects me to login failure. Is the password reset window really not available in the Anyconnect program? Is there any other way to reset the PW in the Anyconnect program? If you know, please answer. Thank you, Best Regards. Best Regards.
... View more
Sep 17 2023
8:10 AM
Dear, Can we configure fixed assign IP address in Anyconnect vpn in Client VPN menu?? I tried to search but cannot confirmed.. Also,, I could not find setting in meraki dashboard. Please answer if you know it. Thank you Best Regards.
... View more
Labels:
- Labels:
-
Client VPN
Sep 16 2023
10:46 AM
I want only use WAN link Internet 2 and 3,,, Should I need to set up Internet 2 via local page,, and Internet 3 via Meraki dashboard after connected internet?
... View more
Sep 16 2023
7:50 AM
Dear I would like to set the IP address to connect the Internet line to the Internet 2 and Internet 3 ports of the MX75 equipment model. (Both ports are connected by UTP cable) By the way, I accessed the web through the local console, but I can only see Internet 1 and Internet 2. Is it possible to set the Internet 3 port after the Internet connection to the Meraki dashboard? If you know, please answer. Thank you, Best Regards.
... View more
Sep 12 2023
5:51 PM
I have a MX device ha pair. (appliance / spare) And I completed register 1 EA MX license. (ENT) By the way, I checked the license was registered spare serial number MX device. Is there any no problem? Or,,, Should I swap between appliance serial number and spare serial number? Please share me. Thanks, Best regard.
... View more
Sep 7 2023
9:48 PM
When configuring LAN ports on MX equipment operating in Routed mode, only subnet/IP addresses can be set in the Single LAN option, and subnet/IP addresses/port can be set in the VLANs option, but the port can only be set in trunk/access mode. Is it impossible to set the LAN port as L3 Routed Port? I tried searching for Routed port settings on MX equipment, but I can't check the similarities. Please answer it. Thank you, Best Regards.
... View more
© 2024 Cisco Systems, Inc.
