topic Re: All access points KO in Wireless

All access points KO

TalentBari — Fri, 21 Jun 2024 08:16:28 GMT

Hello,
we have a problem within our infrastructure.
All access points are offline and unreachable from the Meraki dashboard.

I have already rebooted switch and mx but with no results.
We have manually reset from the 1 access point key, to no avail.
Removed power cable to switch and mx, to no avail.

I restarted the vpn tunnel on our firewall, but no result.
I do have these evidences though:
there seems to be a ko tunnel on the mx side, I think this is the reason.
what can i do to restart it ?

many thanks

MX: MX67

Switch: MS210-48FP

Access point: MR36

also I notice that the access points come out with the cloudflare address, but no one has set this value for them.
why does this happen?

Re: All access points KO

aleabrahao — Fri, 21 Jun 2024 08:44:13 GMT

I would suggest you open a support case.

Re: All access points KO

aleabrahao — Fri, 21 Jun 2024 10:09:57 GMT

To me you seem to have a DHCP problem. Who is your DHCP server today? I don't believe the tunnel down is the problem. However, without having greater visibility of your network, it is difficult to give an accurate answer.

Re: All access points KO

TalentBari — Fri, 21 Jun 2024 10:36:33 GMT

THE dhcp role is on a domain controller.
we have other international locations with the same configuration.
only this configuration here, has a ko tunnel, as you see in the image.

Re: All access points KO

TalentBari — Fri, 21 Jun 2024 10:38:45 GMT

this is another office with the configuration of the 2 tunnels not in error.
that's why i think the problem is in one tunnel

Re: All access points KO

aleabrahao — Fri, 21 Jun 2024 10:48:41 GMT

Haven't you checked with your ISP to make sure you're not having a link problem?

Why do you centralize in a single DHC? Wouldn't it be more viable to configure the MX as a DHCP server in the location?

Re: All access points KO

ww^ — Fri, 21 Jun 2024 11:17:29 GMT

Do you have a firewall in front of the spoke or hub? lf so, Make sure auto vpn traffic is allowed from the public ip's

Re: All access points KO

TalentBari — Fri, 21 Jun 2024 12:11:54 GMT

we have a vodafone router, we tried connecting the laptop with cable and it works.
ce connectivity then.

now i can't think about improving the system, i have to solve the problem because it is serious.
the office is ko

Re: All access points KO

TalentBari — Fri, 21 Jun 2024 12:21:37 GMT

the office is located in Madrid
the firewall is located in France.
it is an international infrastructure.
the meraki uses vpn tunnels as you can see from the pictures.
this is the log from the firewall:

Re: All access points KO

aleabrahao — Fri, 21 Jun 2024 12:57:30 GMT

Call Meraki support, they will help you.

Re: All access points KO

GreenMan — Fri, 21 Jun 2024 13:41:23 GMT

Assuming your MX is connected via an Internet link or links I would ultimately suggest you configure the network so that the switch(es) and access point(s) break out directly to the Internet from the MX - don't send their management traffic over tunnel. That may mean provisioning a management VLAN to them, which has VPN disabled
Bear in mind that you can do a lot in troubleshooting tunnels using Network-wide > packet capture from the MXs at each end, looking at the Internet side; filter for the destination public IP of the other MX and see what is being sent and received at which end. This will show if the MXs are sending tunnel initiation packets to the right destinations and whether they are being received. If the WAN links at both ends are up, my guess is that something upstream is blocking some of the traffic. Support will help you with this - call them, rather than raising a case via Dashboard.

Re: All access points KO

ppurroy — Fri, 21 Jun 2024 14:57:42 GMT

Check your native VLANs between all of your devices. They should ideally all match.

Re: All access points KO

Alejandro Flores — Sat, 22 Jun 2024 00:08:26 GMT

Hi,

If the tunnel is down and all the traffic on the LAN is down probably the VPN is configured as full tunnel. Try to disable the default route check box if selected. To check the VPN tunnel connectivity check the ports at the upstream. Rebooting the ISP modem could be a quick attempt to reset the connections.

https://documentation.meraki.com/MX/Site-to-site_VPN/Meraki_Auto_VPN_-_Configuration_and_Troubleshooting#Auto_VPN_Configuration_Details

Re: All access points KO

TalentBari — Mon, 24 Jun 2024 09:04:58 GMT

Good morning,

this morning before making the change I found the switch offline. I applied the modification you suggested to no avail.

(changed switch port to 101, all switch ports to 101).

The serious situation Now is that the switch is not possible to reboot, I can't reach it. What can I do ?

I noticed that:

Another configuration for the another office for example, has the VLAN on the MX set as 101, but the switch and the ports on it are all on VLAN1, despite this, everything works fine !

for what reason ?

thanks again.