Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have a basic setup.4 x Meraki MX's across 4 sites. All talking to each other via Meraki S-2-S VPN.Under ../manage/configure/vpn_settings I have the networks propagated with the drop down of 'VPN participation' : 'On'... they are two wide /16 netwo...
This is great for ASA sizinghttps://apps.cisco.com/ccw/cpc/compare/ucsComparePage?selectedValues=model_asa5506,model_asa5506wa,model_asa5506hx,model_asa5508x,model_asa5512x,model_asa5515x,model_asa5516x,model_asa5525x,model_asa5545x,model_asa5555x,mo...
The ACL state-machine/architecture doesn't seem like it facilitates blocking on non L4 protocols, aka L3 protocol ICMP ?https://documentation.meraki.com/MS/Other_Topics/Switch_ACL_OperationI can't block ICMP with this MS ACL engine ?
Unlike building an ASA-FPWR-BUN in CCO, the FP####-BUN doesn't present an option to add FS/FMC ? Only gets you to Step 1, Pick Hardware, Step 2, Pick the subscriptions/threat filters.
And does anyone have a good matrix of inclusions/exclusions of FD...
Surely the two of you have raised this as 'make a wish' or whatever that feature is in the console/dashboard ? Or is there an 'ideation' area in the community for such a thing ?How do we get Meraki to inject this into its development cadence. The me...
I'm going to have to get the other side to add them in.. (very silly/limiting), and then i'll firewall out the traffic... This is commoditised IPSEC S-2-S capability.. amazed you can't have a NEAR/FAR specified set per peer..You can have FAR per peer...
@Marvin Rhoads...If you pick 5Gb+ for bandwidth profile and have all engines/filters ticked except for the last one, being VPN (aka, all prior checkboxes..).Do you get any options ? (Common packet profile and 40-80% uti)
