Cisco 3560 config pier with Meraki MX FireFall

[gabrielvalentin545917544]

How to integrate a Meraki firewall with Catalyst 3650 switches

How to integrate a Meraki firewall with Catalyst 3650 switches Configuration

while the Meraki FW gives out DHCP.

[gabrielvalentin545917544]

How to integrate a Meraki firewall with Catalyst 3650 switches Configuration

while the Meraki FW gives out DHCP.

[paul driver]

Hello
MX
You need to create the L3 vlans via the meraki dashboard (Security/Sdwan-Addressing  & Vlans - routed mode) then create the dhcp scopes in (DHCP)
Attach one of the physcal ports of the MX to a 3560 switchport

3560
The swtchport connecting to the MX create as a trunk, Then create the L2 vlans that relate to the routed vlans on the MX
Assign access-ports to the any of the vlans your hosts are to be a part of.
(Optional) Give the switch a mgt ip address in any one of the routed vlans created on the MX with a default-gateway of the MX ip address for that vlan.

[gabrielvalentin545917544]

Can you please mimic a config for me please? It in a live network and I don’t want to break anything.

Thanks

[paul driver · Accepted solution]

Hello

nothing for you to break - The meraki requires l3 interface so to enable you to create the dhcp scope - if that’s not already done they just need creating as i have already stated but you can view here

as for the switch - A simple L2 trunk is required to connect to the meraki mx -I am assuming you know how to do this part?

[Georg Pauwen]

Hello,

have a look at the short video below. As mentioned by Paul, connect the 3560 to one of the built-in ports on the Meraki MX (the Meraki ports are trunks by default, make sure the 3560 is a trunk port as well). Then configure the Vlans you need as outlined in the video.

https://www.youtube.com/watch?v=OxtMThK2E2w

[alexander.casasola]

Hi Paul,

I am having a similar problem with connecting the Meraki MX on the 3560 and not working.

I have included a diagram of the network which has multiple vlans but I just trying to connect the MX to a switch on another floor.

On the MX I created a Vlan (405) the I assigned that Vlan a port on the Meraki (Port 10).

VLAN   405   Internal   Subnet: 192.168.128.0/24  MX IP: 192.168.128.1 

On the 3560 I used port 29 and configured it as follows:

interface GigabitEthernet0/29
description MX65
switchport access vlan 405
switchport trunk encapsulation dot1q
switchport trunk native vlan 405
switchport trunk allowed vlan 405
switchport mode trunk
switchport nonegotiate
spanning-tree portfast trunk
end

On the Core Switch I configured it as follow:

interface Vlan405
description ENG_NETWORK
ip address 192.168.128.2 255.255.255.0
no ip redirects
no ip proxy-arp

This is as far as I get, I try to ping the MX from the 3560 and it fails but the link is up.

I try to ping the MX from the core and same results.

I didn't want to continue since I can't get to the MX, I am pretty sure I am missing something or forgot something.

Any help would be very much appreciated.

Thanks,

Alex