I have had a very busy Monday morning. Over the weekend, Meraki mass-upgraded security appliances to 26.1.5.Using the DNS proxy config option in DHCP causes all DNS traffic to the appliance itself to be blocked.It seems to affect all MX models.Users...
We are upgrading from a C6807-XL to a C9606R. I use a route-map that calls out traffic to send default traffic to a default next hop. I put it on my Vlans and then I can control what IPSEC tunnel I send traffic too.route-map DEFAULTTRAFFIC, permi...
So i do not know why this is happening and i think the configuration is correct but basically im prepending as path to a prefix and it doesn show up in the next directly connected router which is a bgp neighbor. Same issue persists on both vios route...
Hello all,Does anyone know when Meraki are planning to fix the false positives in the event logs for IP conflict Source IP and/or VLAN mismatch? We're still seeing this in our logs on a daily basis and we can't tell any genuine issues apart from the ...
Hey folks,I have Meraki Auto VPN for connectivity with a hub MX (#1 HQ) and multiple spokes MX (#2 and #3) in different networks which works OK.I have also setup IPSec VPN peer to a 3rd party FW (#4) configured with peer availability on the spoke MX ...
Preference for directing traffic to the tunnel. A higher value is preferred. When a vEdge routerhas multiple tunnels (that is, multiple TLOCs), only the TLOC or TLOCs with the highestpreference are chosen using inbound path selection. However, traffi...
We have a Cisco SD-WAN deployment with the following setup: Some static routes originate in a Service VPN.These routes are replicated into the global routing table.An eBGP session is established with an ISP in VPN 0.We are using the BGP "network" com...
Dear team,I recently purchase LIC-MX68-SEC-1 YR but what I needed is actually LIC-MX68W-SEC-1YR so it was a mixed up on SKUs Now in the dashboad am told I cannot use the lisence I need to get the correct on , can mearki change for me the licenses in...
I have obtained a secondhand ASR-920-4SZ-A and wanted to wipe the configuration clean.Used:write erase delete /force /recursive flash: reloadBut that wiped even the IOS-XE.Where can I obtain TFTP_FILE=asr920-universalk9_npe.16.09.03.SPA.bin as I am u...
Hi,I need to know please if Catalyst 8300 supports SSO & NSF features, to keep the sessions stateful during failover, this can be configured using the Catalyst 8300 routers?Thanks.
Hello All,I'm getting consistent high bandwidth utilization on cisco WS-C6509 interface that is going to our SD-WAN. Is there any way I can see where that traffic is coming from besides network monitoring tool. Thank you!
I have a new C8130-G2 router. This is my first experience with this platform. We are using this for some simple routing at a branch site. So no need for Advantage Routing license or SD WAN license. We are planning to just use the default Essentials R...
We just started working with a new vendor and need to utilize their API from one subnet, the oddity is their API URL has the same IPs as their primary site, so api.site.com resolves to the same set of IPs as site.com. We have close to 100 locations t...
Hello, We have two ISPs, a Cisco 6509 core switch with multiple gigabit and 10G modules, two MX95s configured for HA. Our current setup looks something like this; MX & Switch - WAN Breakout Switch - Google SlidesWe may need to make some changes to ou...
I have 8 3850 Cisco Switches that have a vulnerability that need to be fixed. The vulnerability is ICMP Timestamp Request Remote Date Disclosure. Essentially what I need to do is filter out the ICMP timestamp requests (13), and the outgoing ICMP ti...
