Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Pavan_Pawar
Community Record
36
Posts
0
Kudos
1
Solution
Badges
Feb 21 2024
4:33 AM
thanks, how does it handle return traffic, does it follow the same pattern as mentioned in the document if so then for return traffic we need to create L3,L7 ACL ?
... View more
Feb 21 2024
4:21 AM
what if there is no match in L3 ACL , if traffic with port 513 and there is no matching L3 ACL rule so will it match the Default permit L3 rule and bypass L7 or it will go to L7 as no match in L3 Layer 3 Rules No match No match No match Does Default permit rule match ? Layer 7 Rules Matched - Traffic blocked Imp : what about reverse traffic because the ACLs we configure in MR are destination-based so return traffic will be allowed by default or denied ?
... View more
Feb 21 2024
4:09 AM
i have gone through the document, what if there is no match in L3 ACL , if traffic with port 513 and there is no matching L3 ACL rule so will it match the Default permit L3 rule and bypass L7 or it will go to L7 as no match in L3 and what about reverse traffic because the ACL we configure in MR are destination based so return traffic will be allowed by default?
... View more
Feb 21 2024
3:48 AM
Hello Experts, In the L3/L7 ACL processing order, Does it match the 'Default permit any' rule in L3 ACL or just match the configured one? I have referred to the below document but could not see any L3 Rule which is no match but has an L7 match example source is 10.10.10.10 destination is 1.1.1.1 URL category is Email. there is no L3 ACL but there is L7 ACL which blocks the email category so the above packet will pass to the L7 or in L3 it will match Default any rule and bypass L7? and also what about return traffic, will that be allowed by default https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Layer_3_and_7_Firewall_Processing_Order does reverse traffic also get evaluated in the L3/L7 ACL? -Pavan
... View more
Feb 14 2024
12:40 AM
Hello , do we have an API to find out the uplink interface of my MR APs.? -Pavan
... View more
Feb 6 2024
1:11 AM
Hello Experts, Do we have an API to find the SSIDs per access-point? and also vlan tagging on SSID. Regards, Pavan
... View more
Jan 25 2024
12:58 AM
Would that entry cause a problem in communication as my IP address are same Can Meraki TAC can clear this entries ?
... View more
Jan 25 2024
12:26 AM
Hello , How to clear stale client entries from the dashboard and how long they will stay on the dashboard, what is the timeout value for it? It creates a problem as I see duplicate IPs because the previously connected client IP address(192.168.100.50) still showing under clients and the new client has the same IP address. -Pavan
... View more
Nov 22 2023
2:25 AM
so the isolated ports can communicate to non-isolated ports and Isolated ports can not communicate to isolated port Is It the right understanding?
... View more
Nov 22 2023
1:39 AM
the output you see is taken from the API response in the Postman application.
... View more
Nov 22 2023
1:38 AM
Hello Experts, On switch, I have 4 interfaces that are part of VLAN 100 and interfaces 1 and 2 have been put in Isolation but still they can reach interfaces 3 and 4. What something that's needs to be checked? -Pavan
... View more
Labels:
- Labels:
-
Interfaces
-
Layer 2
Oct 31 2023
4:48 AM
I took the captures Primart MAC - 14:9f:43:a3:ad:e8", Secondary mac- 14:9f:43:a4:09:88", VMAC": "88:15:44:38:00:01" so the calculation you mentioned does not match
... View more
Oct 31 2023
4:09 AM
As per the document, the first three octets would be 88:15:44, I want to know the calculation for the last three octets https://documentation.meraki.com/MS/Layer_3_Switching/MS_Warm_Spare_(VRRP)_Overview
... View more
Oct 31 2023
3:50 AM
Hello Experts, I have configured the warm spare between Meraki MS switches and it's working fine but I could not find the VMAC anywhere in the switch, I know it starts with 88-15-44 but wanted to know the full virtual MAC of the switch. I can find it by taking packet captures but want to know how Switch calculates it. Any RFC to refer for it? Regards, Pavan
... View more
Oct 15 2023
9:22 PM
This document says it starts with 88:15 but I want to find the VMAC of my switch. will there be the same Virtual Mac for all VLANs or will each VLAN have a separate VMAC?
... View more
Oct 12 2023
3:54 AM
Hello Experts, How do we find the virtual mac-address of the warm spare? How do we find the spare device IP address? or which address the spare device selects from L3 VLAN. example : Warm device has 10.10.10.1/24 then the next IP will be picked by spare 10.10.10.2/24 or any random IP will be picked? there will be the same Virtual mac for all VLANs or each VLAN will have a separate VMAC. Regards, Pavan
... View more
Labels:
- Labels:
-
Interfaces
-
Layer 3
Oct 10 2023
2:43 AM
Hello , I have configured the ACL and want to confirm if it also get apply to traffic within VLAN: Confgi: VLAN 10 IP -192.168.10.0/24 ACL : "comment": "TEST_ACL2", "policy": "deny", "ipVersion": "ipv4", "protocol": "tcp", "srcCidr": "192.168.10.10/32", "srcPort": any, "dstCidr": "192.168.10.11/32", "dstPort": any, "vlan": 10 If I send a packet from 192.168.10.10 destined for 192.168.10.11 will it be blocked by ACL as this is local switching traffic? -Pavan
... View more
Labels:
- Labels:
-
ACLs
Oct 6 2023
3:29 AM
Hello Experts, I'm creating ACL on MS Switch and did not find an option to apply it anywhere. so does it get applied automatically to all interfaces in both directions of the switch and does it also get applied to all switches which are part of the network? -Pavan
... View more
Labels:
- Labels:
-
ACLs
Oct 4 2023
2:13 AM
The issue is resolved with the below config change : "portId": "1", "name": "FIXIA-P5-37", "tags": [], "enabled": true, "poeEnabled": true, "type": "trunk", "vlan": 101, "allowed vlans" 101 "portId": "3", "name": "FIXIA-P5-39", "tags": [], "enabled": true, "poeEnabled": true, "type": "trunk", "vlan": 201, "allowed vlans" 201
... View more
Oct 3 2023
5:52 AM
Do I need to make any setting changes to enable inter-vlan routing?
... View more
Oct 3 2023
4:25 AM
this are the Linux machine and nothing sort of blocking on this machines
... View more
Oct 3 2023
4:03 AM
Hello Experts, I have created two L3 VLANs and each VLAN has one test PC connected, PC1 is not able to reach PC2. below is the setup: { "interfaceId": "3705899543372500746", "name": "NAME_VLAN_101", "subnet": "192.168.101.0/24", "interfaceIp": "192.168.101.1", "multicastRouting": "disabled", "vlanId": 101, "defaultGateway": "192.168.101.254", "ospfSettings": { "area": "ospfDisabled" } }, { "interfaceId": "3705899543372500747", "name": "NAME_VLAN_201", "subnet": "192.168.201.0/24", "interfaceIp": "192.168.201.1", "multicastRouting": "disabled", "vlanId": 201, "ospfSettings": { "area": "ospfDisabled" } } ] "portId": "1", "name": "FIXIA-P5-37", "tags": [], "enabled": true, "poeEnabled": true, "type": "access", "vlan": 101, "portId": "3", "name": "FIXIA-P5-39", "tags": [], "enabled": true, "poeEnabled": true, "type": "access", "vlan": 201, routing table : [ { "staticRouteId": "3705899543372501715", "name": "Default route", "subnet": "0.0.0.0/0", "nextHopIp": "192.168.101.254", "advertiseViaOspfEnabled": false, "preferOverOspfRoutesEnabled": false } ] Source - PC1(VLAN101) - 192.168.101.10 Destination - PC2(VLAN201) - 192.168.201.10 PC1 cannot ping PC2, In captures(taken on the dashboard for the switch) I can see the switch is sending an ARP request and receiving an ARP reply from PC2 but the ping fails. On the dashboard, the switch ARP table keeps loading and does not show anything. Note - The default gateway is not reachable as this is local switch routing. Do I need to toggle any settings for inter-vlan routing? Regards, Pavan
... View more
Labels:
- Labels:
-
Interfaces
-
Layer 2
-
Layer 3
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 3013 | Oct 4 2023 2:13 AM |
© 2024 Cisco Systems, Inc.
