Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
HiI want to have multiple MX of different organizations in a data center that hide behind a non-Meraki firewall. All MX are in the same subnet. The MX act as VPN concentrators for SSID tunnels to APs of multiple customers. If I have a look at the doc...
I have understood that for automatic address assignment in Site-to-Site VPN I have to use a template. With it each site gets its own IP addresses from a defined pool. For a hub and spoke network I need to configure the MXs as spokes. the hub site as ...
I am trying to understand how Meraki handles firmware updates. The documentation on some topics is quite clear, other stuff is a bit difficult to understand. That's why I want to ask a few questions:-Is it true that all devices of the same type (MX, ...
I have a one-armed MX VPN Concentrator that is located in a site that is connected over a network with an MTU of 1440. Is there a way to build a Teleworker VPN solution (MR AccessPoint SSID Tunneling) from other sites to this VPN concentrator? Is the...
I would like to have a WLAN solution in which each site uses a separate VLAN for a specific SSID that is transferred over AutoVPN to a central site. Can I use an MX at the central site that still lets me separate all VLAN from the sites and how would...
I did not yet know about the well-behaved part of the FW. But looking at it it makes a lot of sense in terms of economizing ports.Thanks for your endurance in answering my questions.Mat
Hi PhilippI have done further tests and I still can generate IP address overlaps. Just to make sure that I understand the concept of overlap checking in Meraki: Are the checks made per network bound to the same template (in which I define the uniquen...
Thanks Brecht for all the time you dedicate to my issue. The way I see it there must be a mechanism in the ISP FW NAPT process that re-uses previously assigned source ports for different IP addresses in the outgoing direction (which makes sense from ...
Hi BrechtThanks for the answer and sorry for the delay. I still have a question. The way I understand PAT (NAPT) it always consists of a two tuples: one describing local SrcIP/SrcPort and the corresponding global SrcIP/SrcPort, the other one describi...
