Meraki

DarrenOC

Meraki also have a ton of documentation which you can dig through. Worth starting with this one: https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/General_MX_Best_Practices

DarrenOC

Hi @EchoEcho - in all honesty I would just run through the dashboard for your MXs and things will quickly fall into place configuration wise.

DarrenOC

DarrenOC

Layer 7 rules for inbound traffic is already an available feature especially the GEO part. Go to: Security &SD-WAN > Configure > Firewall Scroll down to Layer 7 Firewall Rules. Next to Deny you’ll see a scrolly box. At the bottom is Countries

DarrenOC

Look at the section called Fixed IP assignments: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Configuring_DHCP_Services_on_the_MX_and_MS

DarrenOC

Congrats to all once again on a stellar job. Well done to @AhamBramhasmi and @Gordon-HoC for their contributions and recognition.

DarrenOC

Because you need as many layers of protection as possible. Reverse the question- if we have firewalls with threat protection, IPS/IDS etc then why have endpoint protection?

DarrenOC

Can he fix it?

DarrenOC

Following on from @BlakeRichardson @I’d be looking at the following - Physical and logical topology - licensing - when’s my renewal date - firmware upgrades Those will do for now but there are a ton of others to run through.

DarrenOC

Holding the button for a set period should do the trick as per the document you’ve read and shared. If you have access to the local admin page what’s the issue you’re facing? Ive had a couple of funnies today whereby config I’ve made in the dashboard hasn’t been correctly pushed to the device. Worth a call into support

DarrenOC

You have an MX95 so assume you have a pretty decent internet connection? Are the issues happening during peak usage? What does the latency/loss graphs show on your WAN connection during these events?

DarrenOC

Hmmm…what issues are you having exactly? Are you getting one-way or no audio or are calls choppy/garbled? Telephony either works or it doesn’t! Providers are always too keen to jump at the SIP-ALG is enabled bandwagon.

DarrenOC

FS has always worked for me across both catalyst and Meraki

DarrenOC

Meraki MX sizing https://documentation.meraki.com/MX/MX_Sizing_Information/MX_Sizing_Principles

DarrenOC

There is also this which I don’t think was built by Cisco: https://merakisizing.com/#/

DarrenOC

Hi @mjlandy1 , as per @PhilipDAth‘s comment - this will only come with knowledge and experience. Every customer requirement will be different. Meraki do offer a sizing tool for their Meraki MX portfolio.

DarrenOC

Bit of reading: https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair

DarrenOC

Hi @tman , I’m afraid that won’t work and isn’t supported. the setup is Active / Standby so traffic will only flow via the Active MX until that device fails over to the Standby device. You would have to place the MX in another Network should you wish to utilise it but that would remove your redundancy and also incur the cost of having to license another MX

DarrenOC

Another excellent end result @ravipatel

DarrenOC

Excellent end result. Nice and tidy. Well done @ravipatel

DarrenOC

Hi @Craieggg - I have multiple Orgs and Networks running this firmware and I can’t locate where you would enable/configure both Vlan or rspan

DarrenOC

Hi @hmc25000 , switch 1 where your SVIs are configured should be your Root

DarrenOC

Hi @Messy, I don’t know your environment or business requirements etc but for the sake of simplicity why not move all SVIs into your MX? Then your can restrict inter-vlan traffic on a single device rather than manage both ACLs and MX firewall rules?

DarrenOC

😂🤣 - ok, so seen the other thread. It shouldn’t be service impacting but there’s clearly a recent issue

DarrenOC

Hi @Green_Networker - no. The updates are seamlessly done in the background

About DarrenOC

DarrenOC

Darren O'Connor

Community Record

Badges