<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Allow outbound traffic to Meraki cloud on udp port 7351 on an ASA 5512x in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/allow-outbound-traffic-to-meraki-cloud-on-udp-port-7351-on-an/m-p/2968680#M149061</link>
    <description>&lt;P&gt;Hello, I got some Meraki MS350-24x and they are supposed to automatically connect to the Meraki dashboard and they do if I connect the directly to the modem but behind the ASA 5512x won't leave the local network&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;this is what I'm supposed to configure&lt;/P&gt;
&lt;TABLE class="filter compact fill"&gt;&lt;COLGROUP&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;/COLGROUP&gt;
&lt;THEAD&gt;
&lt;TR class="ft_head"&gt;
&lt;TH class="ft ftl  src ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Source IP&lt;/TD&gt;
&lt;TD&gt;&lt;IMG src="https://n158.meraki.com/images/icon_arrow_up_10x10.png" title="Toggle sort order" alt="[Sorting up]" /&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  dst ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Destination IP&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  ports ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Ports&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  proto ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Protocol&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  direction ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Direction&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  description ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Description&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  devices ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Devices using this rule&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;/TR&gt;
&lt;/THEAD&gt;
&lt;TFOOT&gt;
&lt;TR class="ft_foot"&gt;
&lt;TD class="ft_foot" colspan="7"&gt;
&lt;TABLE class="ft_foot"&gt;
&lt;TFOOT&gt;
&lt;TR class="ft_foot"&gt;
&lt;TD class="pgsel"&gt;&lt;IMG src="https://n158.meraki.com/images/1x1.gif" alt="" /&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TFOOT&gt;
&lt;/TABLE&gt;
&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TFOOT&gt;
&lt;TBODY class="flex-table-body"&gt;
&lt;TR class="ftp0"&gt;
&lt;TD class="ft src"&gt;Your network(s)&lt;/TD&gt;
&lt;TD class="ft dst"&gt;108.161.147.0/24, 199.231.78.0/24, 64.62.142.12/32, 54.193.207.248/32&lt;/TD&gt;
&lt;TD class="ft ports"&gt;7351&lt;/TD&gt;
&lt;TD class="ft proto"&gt;UDP&lt;/TD&gt;
&lt;TD class="ft direction"&gt;outbound&lt;/TD&gt;
&lt;TD class="ft description"&gt;Meraki cloud communication&lt;/TD&gt;
&lt;TD class="ft devices"&gt;Access points, Cameras, MX Security Appliance, Phones, Switches&lt;/TD&gt;
&lt;/TR&gt;
&lt;TR class="ftp1"&gt;
&lt;TD class="ft src"&gt;Your network(s)&lt;/TD&gt;
&lt;TD class="ft dst"&gt;17.0.0.0/8&lt;/TD&gt;
&lt;TD class="ft ports"&gt;443, 2195-2196, 5223&lt;/TD&gt;
&lt;TD class="ft proto"&gt;TCP&lt;/TD&gt;
&lt;TD class="ft direction"&gt;outbound&lt;/TD&gt;
&lt;TD class="ft description"&gt;iOS Systems Manager communication&amp;nbsp;&lt;I alt="[Help]" class="asx_p auto_hohelp fa fa-info-circleapple_push"&gt;&lt;/I&gt;&lt;/TD&gt;
&lt;TD class="ft devices"&gt;Systems Manager&lt;/TD&gt;
&lt;/TR&gt;
&lt;TR class="ftp0"&gt;
&lt;TD class="ft src"&gt;Your network(s)&lt;/TD&gt;
&lt;TD class="ft dst"&gt;Any&lt;/TD&gt;
&lt;TD class="ft ports"&gt;80, 443, 5228-5230&lt;/TD&gt;
&lt;TD class="ft proto"&gt;TCP&lt;/TD&gt;
&lt;TD class="ft direction"&gt;outbound&lt;/TD&gt;
&lt;TD class="ft description"&gt;Systems Manager agent communication, Backup Meraki cloud communication, Android Systems Manager communication&amp;nbsp;&lt;I alt="[Help]" class="asx_p auto_hohelp fa fa-info-circleagent_tcpgoogle_play"&gt;&lt;/I&gt;&lt;/TD&gt;
&lt;TD class="ft devices"&gt;Access points, Cameras, MX Security Appliance, Phones, Switches, Systems Manager&lt;/TD&gt;
&lt;/TR&gt;
&lt;TR class="ftp1"&gt;
&lt;TD class="ft src"&gt;Your network(s)&lt;/TD&gt;
&lt;TD class="ft dst"&gt;64.62.142.2/32, 108.161.147.0/24, 199.231.78.0/24&lt;/TD&gt;
&lt;TD class="ft ports"&gt;993, 7734, 7752, 60000-61000&lt;/TD&gt;
&lt;TD class="ft proto"&gt;TCP&lt;/TD&gt;
&lt;TD class="ft direction"&gt;outbound&lt;/TD&gt;
&lt;TD class="ft description"&gt;Backup configuration downloads, Mac/Windows agent communication, Throughput tests live tool, Backup firmware downloads, Mac/Windows remote desktop&lt;/TD&gt;
&lt;TD class="ft devices"&gt;Access points, Cameras, MX Security Appliance, Phones, Switches, Systems Manager&lt;/TD&gt;
&lt;/TR&gt;
&lt;TR class="ftp0"&gt;
&lt;TD class="ft src"&gt;Your network(s)&lt;/TD&gt;
&lt;TD class="ft dst"&gt;Any&lt;/TD&gt;
&lt;TD class="ft ports"&gt;123&lt;/TD&gt;
&lt;TD class="ft proto"&gt;UDP&lt;/TD&gt;
&lt;TD class="ft direction"&gt;outbound&lt;/TD&gt;
&lt;TD class="ft description"&gt;NTP time synchronization&amp;nbsp;&lt;I alt="[Help]" class="asx_p auto_hohelp fa fa-info-circlentp"&gt;&lt;/I&gt;&lt;/TD&gt;
&lt;TD class="ft devices"&gt;Access points, Cameras, MX Security Appliance, Switches&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;P&gt;.&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;I thought it would be as easy as adding some lines to an existing ACL but nothing&lt;/P&gt;
&lt;P&gt;I tried something like this for instance:&lt;/P&gt;
&lt;P&gt;access-list inside_access_in extended permit udp any any eq 7351&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;Do I need to create some NAT rules?&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;Can somebody please provide some sample config on the best way to do this?&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;Thank you&lt;/P&gt;</description>
    <pubDate>Tue, 12 Mar 2019 08:25:56 GMT</pubDate>
    <dc:creator>jegathi07</dc:creator>
    <dc:date>2019-03-12T08:25:56Z</dc:date>
    <item>
      <title>Allow outbound traffic to Meraki cloud on udp port 7351 on an ASA 5512x</title>
      <link>https://community.cisco.com/t5/network-security/allow-outbound-traffic-to-meraki-cloud-on-udp-port-7351-on-an/m-p/2968680#M149061</link>
      <description>&lt;P&gt;Hello, I got some Meraki MS350-24x and they are supposed to automatically connect to the Meraki dashboard and they do if I connect the directly to the modem but behind the ASA 5512x won't leave the local network&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;this is what I'm supposed to configure&lt;/P&gt;
&lt;TABLE class="filter compact fill"&gt;&lt;COLGROUP&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;COL /&gt;&lt;/COLGROUP&gt;
&lt;THEAD&gt;
&lt;TR class="ft_head"&gt;
&lt;TH class="ft ftl  src ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Source IP&lt;/TD&gt;
&lt;TD&gt;&lt;IMG src="https://n158.meraki.com/images/icon_arrow_up_10x10.png" title="Toggle sort order" alt="[Sorting up]" /&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  dst ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Destination IP&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  ports ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Ports&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  proto ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Protocol&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  direction ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Direction&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  description ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Description&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;TH class="ft ftl  devices ftsortable"&gt;
&lt;TABLE class="lean"&gt;
&lt;TBODY&gt;
&lt;TR&gt;
&lt;TD class="ftlegend"&gt;Devices using this rule&lt;/TD&gt;
&lt;TD&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;/TH&gt;
&lt;/TR&gt;
&lt;/THEAD&gt;
&lt;TFOOT&gt;
&lt;TR class="ft_foot"&gt;
&lt;TD class="ft_foot" colspan="7"&gt;
&lt;TABLE class="ft_foot"&gt;
&lt;TFOOT&gt;
&lt;TR class="ft_foot"&gt;
&lt;TD class="pgsel"&gt;&lt;IMG src="https://n158.meraki.com/images/1x1.gif" alt="" /&gt;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TFOOT&gt;
&lt;/TABLE&gt;
&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TFOOT&gt;
&lt;TBODY class="flex-table-body"&gt;
&lt;TR class="ftp0"&gt;
&lt;TD class="ft src"&gt;Your network(s)&lt;/TD&gt;
&lt;TD class="ft dst"&gt;108.161.147.0/24, 199.231.78.0/24, 64.62.142.12/32, 54.193.207.248/32&lt;/TD&gt;
&lt;TD class="ft ports"&gt;7351&lt;/TD&gt;
&lt;TD class="ft proto"&gt;UDP&lt;/TD&gt;
&lt;TD class="ft direction"&gt;outbound&lt;/TD&gt;
&lt;TD class="ft description"&gt;Meraki cloud communication&lt;/TD&gt;
&lt;TD class="ft devices"&gt;Access points, Cameras, MX Security Appliance, Phones, Switches&lt;/TD&gt;
&lt;/TR&gt;
&lt;TR class="ftp1"&gt;
&lt;TD class="ft src"&gt;Your network(s)&lt;/TD&gt;
&lt;TD class="ft dst"&gt;17.0.0.0/8&lt;/TD&gt;
&lt;TD class="ft ports"&gt;443, 2195-2196, 5223&lt;/TD&gt;
&lt;TD class="ft proto"&gt;TCP&lt;/TD&gt;
&lt;TD class="ft direction"&gt;outbound&lt;/TD&gt;
&lt;TD class="ft description"&gt;iOS Systems Manager communication&amp;nbsp;&lt;I alt="[Help]" class="asx_p auto_hohelp fa fa-info-circleapple_push"&gt;&lt;/I&gt;&lt;/TD&gt;
&lt;TD class="ft devices"&gt;Systems Manager&lt;/TD&gt;
&lt;/TR&gt;
&lt;TR class="ftp0"&gt;
&lt;TD class="ft src"&gt;Your network(s)&lt;/TD&gt;
&lt;TD class="ft dst"&gt;Any&lt;/TD&gt;
&lt;TD class="ft ports"&gt;80, 443, 5228-5230&lt;/TD&gt;
&lt;TD class="ft proto"&gt;TCP&lt;/TD&gt;
&lt;TD class="ft direction"&gt;outbound&lt;/TD&gt;
&lt;TD class="ft description"&gt;Systems Manager agent communication, Backup Meraki cloud communication, Android Systems Manager communication&amp;nbsp;&lt;I alt="[Help]" class="asx_p auto_hohelp fa fa-info-circleagent_tcpgoogle_play"&gt;&lt;/I&gt;&lt;/TD&gt;
&lt;TD class="ft devices"&gt;Access points, Cameras, MX Security Appliance, Phones, Switches, Systems Manager&lt;/TD&gt;
&lt;/TR&gt;
&lt;TR class="ftp1"&gt;
&lt;TD class="ft src"&gt;Your network(s)&lt;/TD&gt;
&lt;TD class="ft dst"&gt;64.62.142.2/32, 108.161.147.0/24, 199.231.78.0/24&lt;/TD&gt;
&lt;TD class="ft ports"&gt;993, 7734, 7752, 60000-61000&lt;/TD&gt;
&lt;TD class="ft proto"&gt;TCP&lt;/TD&gt;
&lt;TD class="ft direction"&gt;outbound&lt;/TD&gt;
&lt;TD class="ft description"&gt;Backup configuration downloads, Mac/Windows agent communication, Throughput tests live tool, Backup firmware downloads, Mac/Windows remote desktop&lt;/TD&gt;
&lt;TD class="ft devices"&gt;Access points, Cameras, MX Security Appliance, Phones, Switches, Systems Manager&lt;/TD&gt;
&lt;/TR&gt;
&lt;TR class="ftp0"&gt;
&lt;TD class="ft src"&gt;Your network(s)&lt;/TD&gt;
&lt;TD class="ft dst"&gt;Any&lt;/TD&gt;
&lt;TD class="ft ports"&gt;123&lt;/TD&gt;
&lt;TD class="ft proto"&gt;UDP&lt;/TD&gt;
&lt;TD class="ft direction"&gt;outbound&lt;/TD&gt;
&lt;TD class="ft description"&gt;NTP time synchronization&amp;nbsp;&lt;I alt="[Help]" class="asx_p auto_hohelp fa fa-info-circlentp"&gt;&lt;/I&gt;&lt;/TD&gt;
&lt;TD class="ft devices"&gt;Access points, Cameras, MX Security Appliance, Switches&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;P&gt;.&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;I thought it would be as easy as adding some lines to an existing ACL but nothing&lt;/P&gt;
&lt;P&gt;I tried something like this for instance:&lt;/P&gt;
&lt;P&gt;access-list inside_access_in extended permit udp any any eq 7351&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;Do I need to create some NAT rules?&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;Can somebody please provide some sample config on the best way to do this?&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;Thank you&lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2019 08:25:56 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/allow-outbound-traffic-to-meraki-cloud-on-udp-port-7351-on-an/m-p/2968680#M149061</guid>
      <dc:creator>jegathi07</dc:creator>
      <dc:date>2019-03-12T08:25:56Z</dc:date>
    </item>
  </channel>
</rss>

