Meraki

RWelch

Perhaps you have seen this Deploying Highly Available vMX in Azure ? It might not directly answer how to add to your existing organization but should give you a good idea how to config/deploy (maybe).

RWelch

ECMS Exam Self-study Guide

RWelch

Manage Tags Using Tags to Manage MR Access Points Using Tags to Broadcast SSIDs from Specific APs

RWelch

That may very well be the reason there is NO response from that device (possibly). Might be good to check with whoever controls that device and it's firewall settings.

RWelch

By chance, does the internal LAN device have any firewall enabled or configured?

RWelch

Port Forwarding and NAT Rules on the MX

RWelch

You might continue to see Tiktok sessions that remain active sessions. Firewall rules do not work on active sessions. You'd need to wait like 10 minutes for the firewall to clear active session.

RWelch

TikTok is recognized by NBAR. Can you set a L7 DENY rule using TikTok? After making the policy change, verify it lists TikTok Safari can't connect now so it appears that L7 (stateless) blocking works, or it did for me anyway.

RWelch

El requisito de 3 o más AP para construir un mapa de calor de ubicación más preciso se implementa a partir del firmware 26.1 en adelante. ¿Tienes 3 o más APs? The requirement of 3 or more APs to build a more accurate location heatmap is implemented from firmware 26.1 onwards. Do you have 3 or more APs? Location Heatmaps

RWelch

You can achieve HQs (hub) and branch (spoke) connectivity by just using Site-to-Site VPN by itself since each location as a MX appliance. If you want users/devices to be able to connect from anywhere you'd want to explore Secure Connect. Cisco Secure Connect is a unified Secure Access Service Edge (SASE) product designed to deliver an unparalleled user experience with minimal effort by securely connecting users, things, and applications seamlessly from anywhere. You would need to contact your Sales Representative, reach out to the Sales Team, or visit meraki.cisco.com/eval to register for a free evaluation of a Cisco Meraki product.

RWelch

Hello @Flamby and welcome to the community. If I understand your post, you want to setup a HQs hub and branch spoke using Site-to-Site VPN Settings? If these devices are already claimed by the distributors you work with, you might ask if they'd allow you to be admins to the organization in which they've already been claimed. If they have been claimed, you will not be able to claim them a second time. Hopefully I have understood what you are wanting to achieve. You can toggle on the branch VLANs (subnets) through Site-to-Site VPN that you want your allow access to HQs resources. If you are referring to the Cisco Secure Connect you can find a wealth of resources under this link.

RWelch

If anyone's interested, you can view this VLAN1 scenario/configuration explained on the Learning Hub under Optimizing Meraki-Managed Uplink Connections. The portion that will address your question will be on Slide # 14 of 17 (be sure to scroll down on slide # 14 to see the video toward the bottom of the page).

RWelch

Ah, good to know. Thank you!

RWelch

This was the announcement for more granular access control for your consideration. I'm not 100% sure if it'll help your scenario but it does reference: 1:1 SAML admin alignment for external authentication of users and SSO. Introducing RBAC (Role-Based Access Control) Foundations for enhanced admin management Availability RBAC Foundations will be available in Early Access in an updated version of the dashboard Administrators page globally beginning December 17, 2024. Stay tuned as we continually innovate and add more functionality to enhance role and admin management. P.S. share your feedback with @Katia and the team! Let us know what’s useful and any features you’d like to see below or from the “Give your feedback” button in the bottom right of any dashboard page.

RWelch

The new page shows more granular permission sets - unfortunately I've not (ever) tied the cameras or roles to SSO/SAML but thought it was worth mentioning as it has more granular usability.

RWelch

Are you trying to achieve this using the older admin page or the Early Access > Organization Wide Users Page? Managing Dashboard Administrators and Permissions (Modernized View)

RWelch

@AidanKamp well done and congrats!!

RWelch

Congrats to all that participate in our community of Meraki aficionados from around the world. 👏 👏 👏

RWelch

@mrpackethead_ you can switch back to the old (previous) view.

RWelch

Maybe even RMA them since the factory reset option still doesn’t work 🧐

RWelch

😅

RWelch

Have a couple in production environments to include both as edge firewalls and VPN concentrators. No issue whatsoever. The customer's hindsight is not going with the MX105 from the aspect of being a boost in client devices. We have not had any MX75 reboot issues (ever) with any of the many in production environments.

RWelch

Still an early access program that you can toggle on/off: The Next Generation of the Meraki Dashboard

RWelch

VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout)

RWelch

Another option might be to glance at the RADIUS Issue Resolution Guide, if this isn't helpful you might consider submitting a support ticket with Meraki Support.

About RWelch

RWelch

Community Record

Badges