Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Bala1
Bala1
Here to help
Member since Jun 29, 2023
Jul 18 2023
Community Record
15
Posts
6
Kudos
0
Solutions
Badges
Jul 12 2023
3:00 PM
I see this error on MX Source IP: 192.168.128.55, Source Port: 43467, Destination IP: 9.9.9.10 « hide Destination Port 53 Protocol UDP Block Type DNS NBAR ID 3086 Classification Layer 7 firewall rule Deny Category : NBAR Event Type : Layer 7 rule is there anyway to unblock or allow this? Blocking DNS like this is a headscratcher ? Any help would be appreciated.
... View more
Labels:
- Labels:
-
Firewall
Jul 12 2023
8:51 AM
That is a good idea to packet capture on WAN for port 53. I went another route since I have Pi-hole I got the domain names from there. Tool looks promising hope I will get to use it soon in future. Thanks for sharing.
... View more
Jul 11 2023
3:21 PM
2 Kudos
This really helped with the deny rule I had to see in Syslog and was able to fix it. Thank you for your help.
... View more
Jul 11 2023
12:14 PM
I have MX75, wanted to block some IoT devices going out other than the port and IPs that needs to talk to their respective servers. There was limited logging on the MX itself on cloud so configured Syslog locally and collected the files and checked. Allowed the IPs and ports that it is trying to reach out and denied rest but IoT device failed to connect to the servers. Verified the syslog again it shows only hitting the same IP and ports. I'm not sure I can see all the denied traffic here as the logging messages all looks pretty basic even on Syslog. Syslog is enabled with roles for "Flows" "Security Events" "Appliance Event Log" not sure what else I need to turn on or where I can see more details on firewall deny's. Any one can shed some light what I'm missing would be really helpful.
... View more
Labels:
- Labels:
-
Firewall
Jun 30 2023
7:57 PM
4 Kudos
Brash, You nailed it buddy. It was MTU plus VLAN tagging. I found an Meraki article to check MTU on my current setup and found CL accepts only 1492. I called Meraki support to change that on the WAN port, still didn't work as soon as I added VLAN 201 (CL VLAN tagging) it connected immediately. Thanks for your help
... View more
Jun 30 2023
11:16 AM
I really wanted to value the time of tech and emergency needs that is why I didn't want to call them. I just called to requeue but they just helped anyways.
... View more
Jun 30 2023
10:45 AM
I opened a case last night not sure which time zone case was handled unlike Cisco TAC we know kind of and re-queue the case to local time zone if needed. Is it possible to find that in Meraki support and requeue to get support local time?
... View more
Labels:
- Labels:
-
Other
Jun 30 2023
5:11 AM
CL support is not that great. I will try again when their support is available in my timezone again.
... View more
Jun 30 2023
5:10 AM
First I configured everything from internally so the config's are saved and then tried to connect the CL ISP directly to WAN 2 port. Didn't work so did a factory reset and tried local config. I will try that one more time and check.Just curious so if I do it from local PPoE wont work since it can't save the config?
... View more
Jun 29 2023
9:30 PM
I have Century Link Fiber connection currently working fine on my existing router. When I try to configure the same on MX it is not connecting at all. Tried with or without VLAN 201 tagging, with and without centurylink.net in the username, factory resetting the MX nothing helps. I checked credentials it is correct one. Is it possible to connect the CL ethernet directly on Internet 2 port on MX? or do we need a CL modem in transparent mode to connect to their network. ? I hate to connect another device in between if possible. Let me know if I'm missing something.Thx
... View more
Labels:
- Labels:
-
Firewall
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 4 | 1833 | |
| 2 | 1549 |
© 2024 Cisco Systems, Inc.
