Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Become a member of the Cisco Meraki Community today
Get answers from our community of experts in record time.
Join now- About KSM
About KSM
KSM
Here to help
Member since Sep 7, 2023
Oct 13 2025
Community Record
27
Posts
0
Kudos
0
Solutions
Badges
May 21 2025
7:12 PM
Hi I need help with my current setup... Topology: MR -> BB -> ISE Condition: When connecting to SSID, MR first opens "Splash page", and then enter ISE local db account in ID/PW input field. Then, if 802.1X authentication succeeds, I want to be assigned VLAN 108. However, if authentication fails, it is isolated to VLAN 107. 1. I heard that the above condition only works with MAC authentication. Is that true? 2. Meraki doesn't support Webauth + 802.1x..? 3. Is there no way to utilize isolated VLAN?
... View more
Labels:
- Labels:
-
Other
Jan 22 2024
8:51 PM
Hi @rhbirkelund Yes. I understood the topology as you said. However, I was wondering why devices connected to AUTO VPN automatically share IP bands without adding hubs on the spokes. Thank you
... View more
Jan 22 2024
8:48 PM
Hi @Brash First of all, thank you for your response. As you say, the hub-spoke feature reduces overhead by preventing VPN connections between spoke<->spoke, and eases firewall policy by forcing them to communicate with the hub, correct? Thank you!
... View more
Jan 22 2024
8:40 PM
Hi @ww Thank you for your response. We are configured to use a non-meraki vpn to communicate with aws when vMX is down.
... View more
Jan 4 2024
8:32 PM
Hi` I have it configured as shown below. From: Branch Destination: AWS internal server The branch MX devices have registered vMX and IDC as hubs. And on the IDC, we connected the AWS VPN as a backup. I removed the hub setting for vMX from the branch, leaving only the IDC. There are no hub settings between the IDC and vMX. I thought this would automatically fail over to AWS VPN, but it didn't. It seems that the Hub-Spoke use is just for centralization, and the MXs still share the subnet when the Hub is removed. Is this correct?
... View more
Labels:
- Labels:
-
3rd Party VPN
-
Auto VPN
-
AWS
Dec 12 2023
7:57 PM
Thank you for your reply. MX interlink and bottom link VLAN are different, can I still get a loop? Cisco knows stp is per vlan, but meraki doesn't.
... View more
Dec 12 2023
12:47 AM
Hi~ I know that for MX HA configuration, I need to run VRRP and for that I need one L2. I was wondering if both of the following configurations would work? If they do, isn't the configuration below more convenient because it doesn't have one more cable?
... View more
Dec 10 2023
9:02 PM
I'll try one more time using the method you suggested. Thank you for your response.
... View more
Dec 6 2023
10:02 PM
Hi~ I am testing the integration between Meraki MX and AD server. However, other products work well with AD server. However, only Meraki is not working with the AD server. I looked into it, and it seems like it's failing because it only supports STARTTLS. What should I check on the AD side?
... View more
Labels:
- Labels:
-
Firewall
Nov 17 2023
5:29 AM
Is it correct to say that there is no such feature as split route? Also, it seems that it is possible to NAT to a specific IP band when exporting internal IP bands to the tunnel by using the VPN Subnet Translation feature from the following page. (only auto vpn) https://documentation.meraki.com/MX/Site-to-site_VPN/Using_Site-to-site_VPN_Translation
... View more
Nov 17 2023
1:07 AM
Hi Brash Below is the document you sent us! VPN Subnet Translation This feature is not enabled by default, please contact Meraki support to enable it. Moreover, this feature is only supported for Auto VPN and is not intended to work with non-Meraki VPN peers. Isn't it possible to PAT between internal private IP bands on Auto VPN?
... View more
Nov 16 2023
11:12 PM
It's a shame that outgoing packets from the LAN are captured, but SITE-TO-SITE VPN packets are not.
... View more
Nov 16 2023
11:11 PM
I'm so sorry I have uploaded the topology to the link below. https://community.meraki.com/t5/Security-SD-WAN/Meraki-mx-PAT-question/m-p/215975
... View more
Nov 16 2023
11:10 PM
Hi I have a question while using Meraki MX. Private: 192.168.100.0/24 Tunnel: 10.130.1.1 1. Is it possible to PAT from private to tunnel band? (192.168.100.0/24 -> 10.130.1.1) 2. If PAT is not possible, is there any way to configure the above on the MX? 3. If PAT is possible, is it possible to have the private IP go directly to the internet when using the internet, and go to the tunnel band when tunneling?
... View more
Nov 16 2023
2:09 AM
Hi Meraki Non-meraki site to stie VPN Troubleshooting Contact Us I currently have a tunnel between a Mearki MX and a Juniper SRX and AWS. The SRX is acting as the hub, and both the MX and AWS are connected. The MX is only connected to the SRX. The tunneling is all good. However, no packets are going out. 1. what is the tunnel source ip in MM? 2. When I capture SITE-TO-SITE VPN packets, I don't see any packets, is this correct? 3. Do I need to route them separately? Isn't it just a matter of declaring it on a private subnet?
... View more
Labels:
- Labels:
-
3rd Party VPN
Nov 13 2023
8:07 PM
WAN port 1 connects with AUTO VPN between MX95 and vMX. WAN port 2 is an IPSEC connection between MX95 and AWS. If WAN 1 goes down, WAN 2 automatically takes over. Is this possible? And as an additional question, if I only use WAN 1, will it work if I use AUTO VPN and IPSEC at the same time?
... View more
© 2025 Cisco Systems, Inc.
