Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Does Meraki MX support VPN Hairpinning (U-Turn Routing)?I need to route HQ users' Internet traffic through a Non-Meraki Site-to-Site IPsec VPN to a remote firewall for inspection, then return the traffic through the same VPN tunnel to the Meraki MX a...
Hi everyone,I recently discovered that starting with MX 26.1, Layer 7 firewall rules became stateful and Geo-IP rules no longer block inbound traffic.Honestly, this surprised me. Geo-IP filtering for inbound connections is a common security requireme...
Hello,I am testing Multi-Uplink IPsec VPN between two separate Meraki organizations (MX67 and MX85). Each MX appliance has dual WAN uplinks.I followed the official documentation for Multi-Uplink IPsec VPN, but the behavior is not as expected. The IPs...
Hi everyone,I am trying to determine whether Cisco Meraki MX supports Internal Source NAT (SNAT) between LAN VLANs.My setup is:VLAN 1: 192.168.0.0/24 (Gateway: 192.168.0.1)VLAN 5: 192.168.5.0/24 (Gateway: 192.168.5.1)Server: 192.168.5.10 located in V...
Quick Case ShareAfter upgrading a Cisco Meraki core switch from MS 17.2.2 to IOS XE 17.15.5, we experienced a production outage. Impact:Internet connectivity lossInter-VLAN communication failureDownstream switches went offlineCore Layer 3 routing st...
Thanks for the clarification. Regarding your second suggestion, would placing an additional router behind the MX, terminating a separate IPsec tunnel on it, and using it for local Internet breakout achieve the required traffic flowCould you clarify t...
The customer does not want to configure a default gateway on the server. The requirement is that the staff VLAN should be able to reach the server directly without changing the server network configuration. That’s why we are evaluating NAT behavior o...
