Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About Tintin
About Tintin
Tintin
Getting noticed
Member since Apr 15, 2021
4 weeks ago
Community Record
27
Posts
2
Kudos
2
Solutions
Badges
Apr 15 2024
1:27 AM
Yes, I realized that was likely the reason a while posting my post (so I edited it to add that). Thanks!
... View more
Apr 12 2024
12:33 AM
Also on MX100 and wondering about this, so bumping this thread. Tested yesterday to connect directly to the fibre to Ethernet converter and thus omitting the MX100 and then the bandwidth to the Internet was 850 Mbit/s down and 936 Mbit/s up on the 1 Gb connection we are paying for. When connected to the MX100 it got down to 382 Mbit/s dow and 394 Mbit/s up. So more than half of available bandwidth is lost. I know the MX100 does quite a lot, but still that's a bit too much bandwidth lost, no? Any suggestions on what to check? Firmware is the current release: MX 18.107.2 Aha, maybe it's about this? If my calculations are right, that setting should give 200 Mb/s to each client, so then I actually get more than I should. 🤔 😃 But maybe that is due to the ”SpeedBurst” setting which boosts the bandwidth for a while over five seconds.
... View more
Dec 14 2023
8:08 AM
Hi! I have a bunch of static routes setup in Security & SD–WAN -> Addressing & VLANs Now I wonder if it's possible to let specific IP addresses in the different ranges get bypassed/ignored? For example I have this IP range set as one of the static routes 160.48.0.0/14 and it works fine, but I have one site which IP address is within that range and I'd like to exclude it from a being a part of that static route. Is there a way to do this without having to fiddle with my lists of static routes?
... View more
Labels:
- Labels:
-
Other
Mar 27 2023
7:43 AM
A bit unsure how to set it up. If I just need VPN tunneling to a few specific IP addresses on our LAN, how do I specify that? Would that help with performance instead of routing all traffic via the VPN (I guess it would)? Sorry for my ignorance and thanks for the help!
... View more
Mar 22 2023
12:32 AM
OK, thanks. But not sure how to do that. ”Only send traffic going to these hostnames” and adding the details for our LAN? Do I do it for both ”Client Routing” and ”Dynamic Client Routing”?
... View more
Mar 21 2023
8:49 AM
Yes, AnyConnect VPN is what it says when I open the Cisco Secure Client.app Setup like this in the AnyConnect Settings in Meraki:
... View more
Mar 21 2023
7:49 AM
Forgot to mention I in the above test used the Cisco Secure Client application and operating system MacOS Ventura 13.2.1 So thanks @alemabrahao, but no; I haven't tried that. I think ”Use default gateway on remote network” is an option in Windows, right?
... View more
Mar 21 2023
6:56 AM
Hi! I know there has been a few posts about this before and I understand there will be some throughput loss when connected to the VPN – I just think what I'm seeing is a bit much. For example, on a Wi-Fi with a 100 Mb/s theoretical connection I yesterday got 82 Mbps on the website fast.com which after connecting to our VPN yielded a drop to 22 Mbps. Isn't that a bit much or is this drop to be expected? Anything that can be done? Hardware is MX 100 with firmware MX 17.10.4
... View more
Labels:
- Labels:
-
Client VPN
All problems seems to have been solved since updating the access point to firmware MR 29.4.1.
... View more
Sorry, what do you want to know? 🙂 Not sure what info to provide to isolate the problem more – if I would have known I would have done it. Thanks for the links to these articles! But the problem also happens on Windows devices. And the reason for using band-steering and 2.4 GHz was because it was recommended in a Meraki article when more than one SSID was used. I have been using only 5 GHz and the 20 MHz channel too – the disconnects still happened then. Aslo good to know about the difference between M1 based Macs vs Intel ones. But we have several more MR42 base stations that don't give any disconnect trouble, it's only on that particular base station and SSID.
... View more
Thanks for the links. I was using only 5 GHz before, but changed to band steering because it said that was recommended when broadcasting more than one SSID. The thing is, when the ”disconnect” happens it also applies to a computer running Windows, so it doesn't seem operating system related at all. What also don't make much sense to me is that all the other Cisco access points of the same model and firmware that we have placed around the locale don't disconnect like that particular access point that is broadcasting an SSID that the other base stations don't. So the problem seems to be that particular SSID for some reason. And like I mentioned, it has been working reliably for six month before the problems started.
... View more
It did happen before I went to MR 28.71 and that's why I decided to try going to MR 28.71 (not sure what I was on before) since I saw there were some updates concerning MacBooks in the MR 28.71 firmware. I'm thinking it might be worth to try the MR 29.4 beta.
... View more
This is how the RF profile currently associated with the access point looks like. I enabled ”band-steering” because ut was suggested when more than one SSD is used – was using only 5 GHz before.
... View more
Thanks for elaborating @alemabrahao! 🙂 Turning Layer 3 roaming off seems to have done nothing to wifi stability. 😞 Okay, I will try to enable 802.11r set to ”Adaptive” (found the setting now: Wireless -> Access control) and see if that changes anything. One setting change at a time. 🙂 Shall I enable 802.11w in some form otherwise you think? I guess I should read up more on what it does…
... View more
OK, so you suggest I should dare go for the MR 29.4 Beta? 🙂 Currently on MR 28.71.
... View more
802.11w is disabled. Authentication is done via Pre-shared key (PSK). Not sure where I find the setting for 802.11r, sorry. Is that about the roaming? I see Layer 3 roaming is enabled. Edit: Just disabled Layer 3 roaming. Not sure why it was enabled as we don't use that for any of the other SSIDs. Hope that does it. 😄
... View more
On one of our MR42 access points we have added an SSID that is separate from the one we use for the rest of our MR42 access points spread throughout the locale. Things has been working fine until about a month ago where the users of that SSID started to get seemingly random disconnects from the Wifi network on that particular SSID. The ones on the other SSID we use don't have this problem, but it's also worth mentioning that these are not often close to that particular access point. What happens is that all of the devices connected suddenly drops the connection to the wifi and then it takes a while until it's possible to connect again. Sometimes the devices connects back automatically after about 30 seconds. We haven't changed any setting or so, so I'm staring to think there might be some external interference or something. All devices are on the current firmware as of this typing and everything looks green and healthy in the Meraki dashboard. Average channel utilization is ”low” to ”very low” for both spectrums (we only use 5 GHz though) and I can't see any obvious faults anywhere. Several devices show as getting ”802.11 disassociation unknown reason” from time to time, but that is also seen on the other base stations where the wifi disconnects don't happen. I have no idea where to start troubleshooting this. I did use the ”Wireless Diagnostics” tool on one of the MacOS machines and it did come up with ”Conflicting Wi-Fi CC” being ”yes" – there are several base stations in the proximity (not ours) that seem to be set to use country code DE and FR while our is set to SE since we are in Sweden. Could that be the problem? What can I do about it in that case – I mean I'm not really in control of what settings people in the building where we're at use for their base stations.
... View more
Sep 28 2022
1:58 AM
How does it look at the ”Event log” tab for the the access points? I'm also having trouble with dropouts for various devices and in the event log I (among other things) see: That info ”i” to the right of the messages doesn't give any info when clicked or hovered over. 😞 Another log entry for a devices says: 802.11 disassociation – disassociated due to 802.1X failure I see there are other threads about ”802.11 disassociation” problems, but no clear answer on what to do about it. I guess it's complicated. 😄 Edit: Maybe this thread could be on to something: https://community.meraki.com/t5/Wireless-LAN/802-11-disassociation-issues/m-p/76859
... View more
Getting this same problem now and then (”802.11 Disassociation - Unknown Reason”) on MR42 access point running firmware MR 28.7.1. It has been working fine since a couple of weeks ago when the disconnects started. Don't know of anything that has changed on our side. Could it be something with the firmware for the access point? We're running the currently released version as of this writing. Any ideas on what to do to solve this?
... View more
You mean it's a requirement for the server behind the URL? At the same time, the whole idea of the VPN is to get the same kind of access as if one were connected to our wifi. But maybe... 🤔 I'll see if I can ask them (BMW). I think I can share the URL, it's an Outlook mail server here: https://mail.bmwgroup.net Thanks for trying to help. 🙂
... View more
Thanks for your reply! 🙂 In Wireless > Access Control I don't see anything special and ”Content filtering” is disabled. I think the VPN client is using full tunnel (not sure how to verify this but that's the default mode, isn't it?). There is a MX100 here and looking at Security & SD-WAN > Configure > Content filtering I can't see anything suspicious (looks pretty empty).
... View more
Hi everyone! So I have this external URL that can be reached fine when connected to our VPN, but not when on the wifi in our office where I just get ”ERR_CONNECTION_TIMED_OUT”. I don't see why accessing the URL only works when connected via VPN – there shouldn't be any difference when being on our wi-fi. I wasn't involved in setting up the network and I'm new to Meraki, so not sure where to start looking for the cause of this. Any ideas? Thanks in advance! Kind regards, Tintin
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 4443 | Dec 15 2022 11:01 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 4443 |
© 2024 Cisco Systems, Inc.
