Basic configuration of Cisco Meraki MX Security & SD-WAN

Cisco Meraki MX Security & SD-WAN Appliance (MX64) is a 100% cloud-managed solution for Unified Threat Management (UTM) and SD-WAN in a single appliance. MX appliance is self-provision, automatically pulling policies and configuration settings from the cloud. The MX appliance has a comprehensive suite of network services, eliminating the need for multiple appliances. It has an application-aware feature, which means bandwidth policies for Layer 7 application types (e.g., block YouTube, prioritize Skype, ect..)

STEP 1: Login into Meraki dashboard @ www.meraki.com

STEP 2: Claim and Add a new device:

Under Organization click on “Inventory”.

Click “claim”.

Fill-in the serial number or order number of MX appliance and then click “claim”.

Under Network-wide, click “Add device”.

Add the MX appliance claimed.

STEP 3: Create a network:

Under Network, create a new network.

STEP 4: Configure the Security & SD-WAN:

Create VLAN and addressing;

Specify DHCP pool information;

Create security policies of layer 3 & 7, NAT and anti-spoofing;

Configure IPsec VPN tunnel & VPN client;

Enable authentication by Active Directory;

Configure SD-WAN & Traffic shaping;

Configure AMP (Advanced Malware Protection), Intrusion Detection & System (IDS & IPS);

Configure Content Filtering (URL, Category & Search filtering).

STEP 5: Verification:

Under Organization choose “Overview” to check the appliance status.

Under Organization, choose the “Summary report” to check different traffic passing through MX appliance.

Under Security & SD-Wan, choose “Appliance status” to check the status of the ports and the network usage.

Author: Eric Uwonkunda Ngabonziza

Share this post

English