Meraki

iores

@MartinLL I am just exploring different approaches and their implications given the Meraki best practice. Could you share techincal challenges you had with this?

iores

Your default route is out of WAN port connecting to PE router, and you exchange all othere networks with LAN side via BGP on LAN port? What is the scale of your setup?

iores

Why? Can you share any details?

iores

What do you mean by full tunnel? The concentrator has only one interface for Terminating VPN and LAN traffic. What are design implications of such traffic mixing? What are design implications if you use hub routed mode and connect both interfaces (WAN and LAN) to the same LAN next-hop, not to PE router?

iores

What do you mean by "back out its WAN interface"? But NAT mode will have default route out of its WAN interface since this interface that is also used to connect to Meraki cloud? What is the main difference between one arm concentrator and NAT mode if hub is used with no NAT (as per my understanding, this option is now available)?

iores

Hi, As far as I have read, Meraki one-armed concentrator and routed mode are getting more and more similar (feature wise). Are there any specific uses cases when only one mode should be used in the light that nowadays are very similar? Are there any important features that differ between them? I know that one-armed uses only WAN interface, but beside that, what are additional unique features between them that should be considered when choosing the correct deployment mode?

iores

Yes, thanks for the information. I have read all this ibut somehow I hoped that it could be done over LAN port because two active WAN ports will be connected to private circuits cloud with no connection to the internet, as it appears now, so I am looking for alternative solution.

iores

Hi, I was wondering if anyone tried to use LAN port for connectivity with the dashboard or it has to be one of the WAN ports?

iores

@JeroenVercoulen But OSPF on the LAN side is enabled only if MX is in routed mode, right? Can AutoVPN subnets be advertised over LAN port if MX is in concentrator mode?

iores

How did you managed to have connection to MPLS and internet via only WAN1 port? Was the WAN1 port in the same subnet as firewall LAN side and MPLS side?

iores

If AutoVPN is established over private MPLS circuits, then it is better for hub to be in concentrator or routed mode? The hub gets to internet via upstream L3 switch which is connected to firewall. I remember reading your article on LinkedIn or somewhere where you do not recommend to use concentrator mode.

iores

Not sure I understood you. Your hub was connected only to MPLS? How did it get to internet? Why it didn't worked with routed mode?

iores

Why in concentrator and not in routed mode? I have read that concentrator mode should be avoided because you loose (1) flow preferences, and (2) backup WAN circuit. The article I have read is from 2017 so I don't know if this still is valid as of today

iores

Why putting hub in concentrator mode? Could it work with hub in routed mode? I believe spokes are in routed mode?

iores

Not sure I understand you. All spokes will go to internet via hub. Hub will not be directly connected to ISP but will have L3 link with the upstream L3 switch. So one WAN port I plan to connect to Metro Ethernet cloud to connect with other spoke sites. The second WAN port I plan to connect with upstream L3 switch which is connected to ISP. Would this be correct?

iores

What do you mean with "on the lan side"?

iores

I have just seen that MX 105 supports 10G LAN port. However, I have additional question - if hub MX is connected to two MPLS clouds for connecting to other spoke MXs for AutoVPN purposes, and uses WAN interfaces for this, does this mean that the hub MX needs to get to internet/Meraki Dashboard only via WAN ports or it can get to it via 10G LAN port towards upstream L3 switch?

iores

Hi, As per datasheet, MX 105 supports 4 WAN ports (2x SFP+, 2x 2.5 GB RJ45). Only two WAN ports can be active at the same time. I need to use both SFP+ ports to connect the appliance to two MPLS cloud. Can I use somehow 2.5GB ports to connect the appliance to the upstream L3 switch or will I need to use LAN ports for that instead?

iores

Hi, as of today, does Meraki still supports only advertising AutoVPN routes to OSPF neighbor? I have hub and spoke topology, and would like to advertise AutoVPN subnets from hub to the upstream L3 switch.

iores

Have you ever tested it above recommended client count?

iores

Hi, I have two MX which I would like to configure as a warm spare, and have few questions: Is it enough to connect MXs with L2 link via switch? In other words, I am planning to do so with the trunk which will be arriving from the downstream switch (single switch or stack). Do I need to create some "heartbeat" VLAN between them? As per my understanding, MXs will exchange VRRP messages for all created VLANs so if MX is my L3 device, then, perhaps, I don't need heartbeat VLAN. What will happen if one LAN SVI L3 interface (default gateway) goes down on active MX? I presume the standby MX will not take over just for this one L3 interface. For standby MX to takeover, the primary MX needs to be down completely, right? If MX is connected with two links to the same switch, does this mean that the switch will receive its own BPDUs since MX will forward BPDUs? I was reading this document. Page 5, Section 4, it says: In order for Spanning Tree NOT to block the port to the PRIMARY MX, I had to switch the cables on the downstream switch so it would favor the PRIMARY MX port. (the lowest port- ID in spanning tree) Why is this relevent if MXs are connected via one switch?

iores

Hi, I was looking MX sizing principles: What does Maximum Device Count stand for? Is it maximum active simultaneous devices on the network OR maximum device in general (active and inactive) on the network? Does Maximum Site-to-Site VPN Tunnels count refer to AutoVPN tunnels? What does Maximum Number of Client VPN Tunnels stand for? Is it when MX is used for remote VPN? Thank you!

iores

Hi, I have large deployment with over of 300 sites. Current Catalyst switches, which are end-of-life, are getting replaced with Meraki switches. 1. What is the best way to migrate configuration from Catalyst to Meraki? 2. Based on your experience, what tools/features/strategies would you use? Thanks.

iores · ‎Sep 20 2024

Hi, I have read that 9300L doesn't come with stacking adapters for connecting stacking cables. I can see stacking ports in the dashboard. Does this mean that adapters are installed since the stacking ports are visible in the dashboard?

iores · ‎Sep 20 2024

@ammahend What switch will become the master/primary? Is there any way to configure this in Meraki dashboard?

Meraki

Community

About iores

iores

Community Record

Badges

Re: SD-WAN hub mode

Re: SD-WAN hub mode

Re: SD-WAN hub mode

Re: SD-WAN hub mode

Re: SD-WAN hub mode

SD-WAN hub mode

Re: MX 95 and higher models uplink settings

MX 95 and higher models uplink settings

Re: MX OSPF support

Re: MX 105 WAN ports

Re: VPN Concentrator Operating Mode Comparison

Re: MX 105 WAN ports

Re: MX 105 WAN ports

Re: Connecting MX's with a Layer 2 connection.

Re: MX 105 WAN ports

Re: MX OSPF support

Re: MX 105 WAN ports

MX 105 WAN ports

MX OSPF support

Re: MX sizing & feature specific data

MX Warm Spare

MX sizing & feature specific data

Meraki large deployment

9300L stacking ports

Re: 9300L-M stacking