Troubleshooting Firewalls - Revision history

HooperJM at 21:25, 21 October 2024

2024-10-21T21:25:57Z

← Older revision		Revision as of 21:25, 21 October 2024
Line 56:		Line 56:


	== ~~Interpreting the~~ Status Indicator ==		== Status Indicator ==

	=== Status light is solid White but still no internet connectivity ===		=== Status light is solid White but still no internet connectivity ===

HooperJM at 21:25, 21 October 2024

2024-10-21T21:25:23Z

← Older revision		Revision as of 21:25, 21 October 2024
Line 3:		Line 3:
	Church Network Manager (CNM) gets the firewall status from the Cisco/Meraki website. The firewall status will be one of the following:		Church Network Manager (CNM) gets the firewall status from the Cisco/Meraki website. The firewall status will be one of the following:

	=== ~~'''~~ONLINE~~'''~~ ===		=== ONLINE ===
	the Firewall is able to communicate with the internet and with the Meraki website.		the Firewall is able to communicate with the internet and with the Meraki website.

	=== ~~'''~~OFFLINE~~'''~~ ===		=== OFFLINE ===
	the firewall is not able to communicate with the Meraki website. This could be for the following reasons:		the firewall is not able to communicate with the Meraki website. This could be for the following reasons:

Line 21:		Line 21:
	The firewall is able to communicate with the Cisco/Meraki website but there appears to be an alert that needs attention. Please contact the GSD, for help in troubleshooting firewall alerts.		The firewall is able to communicate with the Cisco/Meraki website but there appears to be an alert that needs attention. Please contact the GSD, for help in troubleshooting firewall alerts.

	=== ~~'''~~UNKNOWN~~'''~~ ===		=== UNKNOWN ===
	the firewall is not able to communicate to the Cisco/Meraki website to get a status. Follow the same troubleshooting steps in the OFFLINE status above.		the firewall is not able to communicate to the Cisco/Meraki website to get a status. Follow the same troubleshooting steps in the OFFLINE status above.

Line 27:		Line 27:
	After the Meraki switch(es) have been installed the Firewall ports will be configured to the following:		After the Meraki switch(es) have been installed the Firewall ports will be configured to the following:

	=== ~~'''~~Meraki MX64 Ports:~~'''~~ ===		=== Meraki MX64 Ports: ===
	Port 1 - Connected to an SFP Port on the Meraki Switch		Port 1 - Connected to an SFP Port on the Meraki Switch

Line 36:		Line 36:
	Port 4- Disabled and no longer used		Port 4- Disabled and no longer used

	=== ~~'''~~Meraki MX67 Ports:~~'''~~ ===		=== Meraki MX67 Ports: ===
	Port 1 - Connected to the Internet or ISP Modem		Port 1 - Connected to the Internet or ISP Modem

Line 47:		Line 47:
	Port 5- Disabled and no longer used		Port 5- Disabled and no longer used

	=== ~~'''~~Meraki MX68 and MX68W Ports:~~'''~~ ===		=== Meraki MX68 and MX68W Ports: ===
	Port 1 or Port 2 - Connected to the Internet or ISP Modem		Port 1 or Port 2 - Connected to the Internet or ISP Modem

HooperJM: Formatting changes

2024-10-21T21:23:56Z

Formatting changes

← Older revision		Revision as of 21:23, 21 October 2024
Line 3:		Line 3:
	Church Network Manager (CNM) gets the firewall status from the Cisco/Meraki website. The firewall status will be one of the following:		Church Network Manager (CNM) gets the firewall status from the Cisco/Meraki website. The firewall status will be one of the following:

	# '''ONLINE''' - the Firewall is able to communicate with the internet and with the Meraki website.		=== '''ONLINE''' ===
	~~# '''OFFLINE''' - the firewall is not able to communicate with the Meraki website. This could be for the following reasons:~~		the Firewall is able to communicate with the internet and with the Meraki website.
	~~## The Internet Service Provider's (ISP) connection to the property is down.~~
	~~## The ISP's modem (normally a black box) is not functioning properly (reboot the modem by disconnecting power for 30 seconds)~~
	# '''ALERTING''' - The firewall is able to communicate with the Cisco/Meraki website but there appears to be an alert that needs attention. Please contact the GSD, for help in troubleshooting firewall alerts.
	~~# '''UNKNOWN''' - the firewall is not able to communicate to the Cisco/Meraki website to get a status~~
	~~## Follow the same steps in the OFFLINE status above~~.

	== ~~To Troubleshoot an~~ offline ~~firewall, follow these steps~~: ==		=== '''OFFLINE''' ===
			the firewall is not able to communicate with the Meraki website. This could be for the following reasons:

			# The Internet Service Provider's (ISP) connection to the property is down.
			# The ISP's modem (normally a black box) is not functioning properly (reboot the modem by disconnecting power for 30 seconds)

			==== Troubleshooting offline status: ====

	# If the ISP connection and modem are functioning then disconnect the power to the Cisco/Meraki Firewall for 30 seconds.		# If the ISP connection and modem are functioning then disconnect the power to the Cisco/Meraki Firewall for 30 seconds.
Line 17:		Line 18:
	# If the Firewall does not eventually get back to a solid White light then call the GSD.		# If the Firewall does not eventually get back to a solid White light then call the GSD.

			=== ALERTING ===
			The firewall is able to communicate with the Cisco/Meraki website but there appears to be an alert that needs attention. Please contact the GSD, for help in troubleshooting firewall alerts.

			=== '''UNKNOWN''' ===
			the firewall is not able to communicate to the Cisco/Meraki website to get a status. Follow the same troubleshooting steps in the OFFLINE status above.

	== Installation and Configuration Guide ==		== Installation and Configuration Guide ==

HooperJM: Cleaned up confusing language

2024-10-21T21:14:13Z

Cleaned up confusing language

← Older revision		Revision as of 21:14, 21 October 2024
Line 7:		Line 7:
	## The Internet Service Provider's (ISP) connection to the property is down.		## The Internet Service Provider's (ISP) connection to the property is down.
	## The ISP's modem (normally a black box) is not functioning properly (reboot the modem by disconnecting power for 30 seconds)		## The ISP's modem (normally a black box) is not functioning properly (reboot the modem by disconnecting power for 30 seconds)
	~~## If the ISP connection and modem are functioning then disconnect the power to the Cisco/Meraki Firewall for 30 seconds.~~		# '''ALERTING''' - The firewall is able to communicate with the Cisco/Meraki website but there appears to be an alert that needs attention. Please contact the GSD, for help in troubleshooting firewall alerts.
	~~## The Firewall indicator light will be orange, then rainbow colors and then eventually blinking or solid white which is the operational state. See more details about light colors below.~~
	~~## If the Firewall does not eventually get back to a solid White light then call the GSD.~~
	# '''~~WARNING/VPN DOWN~~''' - The firewall is able to communicate with the Cisco/Meraki website but ~~the Virtual Private Network (VPN) is down or the Meraki website is not able~~ to ~~connect to the Facility zone if one is present~~.
	~~## Follow~~ the ~~same steps~~ in ~~the OFFLINE status above~~.
	# '''UNKNOWN''' - the firewall is not able to communicate to the Cisco/Meraki website to get a status		# '''UNKNOWN''' - the firewall is not able to communicate to the Cisco/Meraki website to get a status
	## Follow the same steps in the OFFLINE status above.		## Follow the same steps in the OFFLINE status above.

			== To Troubleshoot an offline firewall, follow these steps: ==

			# If the ISP connection and modem are functioning then disconnect the power to the Cisco/Meraki Firewall for 30 seconds.
			# The Firewall indicator light will be orange, then rainbow colors and then eventually blinking or solid white which is the operational state. See more details about light colors below.
			# If the Firewall does not eventually get back to a solid White light then call the GSD.



	==~~= Meraki Firewall Troubleshooting~~ Guide~~: =~~==
			== Installation and Configuration Guide ==
	After the Meraki switch(es) have been installed the Firewall ports will be configured to the following:		After the Meraki switch(es) have been installed the Firewall ports will be configured to the following:

	'''Meraki MX64 Ports:'''		=== '''Meraki MX64 Ports:''' ===

	Port 1 - Connected to an SFP Port on the Meraki Switch		Port 1 - Connected to an SFP Port on the Meraki Switch

Line 29:		Line 32:
	Port 4- Disabled and no longer used		Port 4- Disabled and no longer used

	'''Meraki MX67 Ports:'''		=== '''Meraki MX67 Ports:''' ===

	Port 1 - Connected to the Internet or ISP Modem		Port 1 - Connected to the Internet or ISP Modem

Line 41:		Line 43:
	Port 5- Disabled and no longer used		Port 5- Disabled and no longer used

	'''Meraki MX68 and MX68W Ports:'''		=== '''Meraki MX68 and MX68W Ports:''' ===

	Port 1 or Port 2 - Connected to the Internet or ISP Modem		Port 1 or Port 2 - Connected to the Internet or ISP Modem

Line 50:		Line 51:


	~~== Status light is solid White but still no internet connectivity ==~~

			== Interpreting the Status Indicator ==

			=== Status light is solid White but still no internet connectivity ===
	# Solid white indicates that the firewall has internet connectivity		# Solid white indicates that the firewall has internet connectivity
	## Verify the serial number of the Meraki firewall in your meetinghouse matches the serial number indicated in CNM.		## Verify the serial number of the Meraki firewall in your meetinghouse matches the serial number indicated in CNM.
Line 60:		Line 63:
	# If you are unable to access the internet when connected directly to port 2 on the MX64 or Port 3 on the MX67 firewall, contact the Global Service Desk		# If you are unable to access the internet when connected directly to port 2 on the MX64 or Port 3 on the MX67 firewall, contact the Global Service Desk

	== Status light is blinking white ==		=== Status light is blinking white ===

	# This indicates that the Meraki firewall is updating to the latest internal firmware		# This indicates that the Meraki firewall is updating to the latest internal firmware
	## Generally, this is completed within a few minutes but may take 30 minutes or longer for a new firewall to update		## Generally, this is completed within a few minutes but may take 30 minutes or longer for a new firewall to update
Line 68:		Line 70:
	# The Meraki firewall will function normally during the update process		# The Meraki firewall will function normally during the update process

	== Status light is Orange ==		=== Status light is Orange ===

	# Indicates that the device is booting up		# Indicates that the device is booting up
	# This is normal for one to two minutes after the device is powered up or rebooted		# This is normal for one to two minutes after the device is powered up or rebooted
Line 75:		Line 76:
	## If the device continues in this state after rebooting, contact the Global Service Desk		## If the device continues in this state after rebooting, contact the Global Service Desk

	== Status light is cycling through colors (Referred to hereafter as the “Rainbow State”) ==		=== Status light is cycling through colors (Referred to hereafter as the “Rainbow State”) ===

	# Indicates that the device is fully booted and attempting to communicate with the Meraki cloud management application		# Indicates that the device is fully booted and attempting to communicate with the Meraki cloud management application
	# Once the device is in contact with the Meraki cloud management application, and has downloaded its current configuration file, the indicator will transition to white		# Once the device is in contact with the Meraki cloud management application, and has downloaded its current configuration file, the indicator will transition to white

NormanKR at 16:58, 15 August 2023

2023-08-15T16:58:43Z

← Older revision		Revision as of 16:58, 15 August 2023
Line 10:		Line 10:
	## The Firewall indicator light will be orange, then rainbow colors and then eventually blinking or solid white which is the operational state. See more details about light colors below.		## The Firewall indicator light will be orange, then rainbow colors and then eventually blinking or solid white which is the operational state. See more details about light colors below.
	## If the Firewall does not eventually get back to a solid White light then call the GSD.		## If the Firewall does not eventually get back to a solid White light then call the GSD.
	# '''WARNING/VPN DOWN''' - The firewall is able to communicate with the Cisco/Meraki website but the Virtual Private Network (VPN) is down or the Meraki website is not able to connect to the ~~Meetinghouse~~ Facility zone if one is present.		# '''WARNING/VPN DOWN''' - The firewall is able to communicate with the Cisco/Meraki website but the Virtual Private Network (VPN) is down or the Meraki website is not able to connect to the Facility zone if one is present.
	## Follow the same steps in the OFFLINE status above.		## Follow the same steps in the OFFLINE status above.
	# '''UNKNOWN''' - the firewall is not able to communicate to the Cisco/Meraki website to get a status		# '''UNKNOWN''' - the firewall is not able to communicate to the Cisco/Meraki website to get a status

NormanKR at 17:16, 10 August 2023

2023-08-10T17:16:22Z

← Older revision		Revision as of 17:16, 10 August 2023
Line 50:		Line 50:


	== a) Status ~~indicator~~ is solid White but still no internet connectivity ==		== Status light is solid White but still no internet connectivity ==

	# Solid white indicates that the firewall has internet connectivity		# Solid white indicates that the firewall has internet connectivity
Line 60:		Line 60:
	# If you are unable to access the internet when connected directly to port 2 on the MX64 or Port 3 on the MX67 firewall, contact the Global Service Desk		# If you are unable to access the internet when connected directly to port 2 on the MX64 or Port 3 on the MX67 firewall, contact the Global Service Desk

	== b) Status ~~indicator~~ is blinking white ==		== Status light is blinking white ==

	# This indicates that the Meraki firewall is updating to the latest internal firmware		# This indicates that the Meraki firewall is updating to the latest internal firmware
Line 68:		Line 68:
	# The Meraki firewall will function normally during the update process		# The Meraki firewall will function normally during the update process

	== c) Status ~~indicator~~ is Orange ==		== Status light is Orange ==

	# Indicates that the device is booting up		# Indicates that the device is booting up
Line 75:		Line 75:
	## If the device continues in this state after rebooting, contact the Global Service Desk		## If the device continues in this state after rebooting, contact the Global Service Desk

	== d) Status ~~indicator~~ is cycling through colors (Referred to hereafter as the “Rainbow State”) ==		== Status light is cycling through colors (Referred to hereafter as the “Rainbow State”) ==

	# Indicates that the device is fully booted and attempting to communicate with the Meraki cloud management application		# Indicates that the device is fully booted and attempting to communicate with the Meraki cloud management application

NormanKR at 19:01, 13 January 2023

2023-01-13T19:01:48Z

← Older revision		Revision as of 19:01, 13 January 2023
Line 41:		Line 41:
	Port 5- Disabled and no longer used		Port 5- Disabled and no longer used

	'''Meraki ~~MX67~~ Ports:'''		'''Meraki MX68 and MX68W Ports:'''

	Port 1 or Port 2 - Connected to the Internet or ISP Modem		Port 1 or Port 2 - Connected to the Internet or ISP Modem
Line 56:		Line 56:
	## If they do not match you will need to replace the firewall in CNM with the one that is in the building (Contact the Global Service Desk for assistance if needed)		## If they do not match you will need to replace the firewall in CNM with the one that is in the building (Contact the Global Service Desk for assistance if needed)
	# If the serial number does match the one registered to your building in CNM then the Meraki firewall is likely functioning properly		# If the serial number does match the one registered to your building in CNM then the Meraki firewall is likely functioning properly
	# Connect a laptop or workstation directly to port 2 on ~~the Meraki~~ firewall and verify internet connectivity		# Connect a laptop or workstation directly to port 2 on an MX64 firewall or Port 3 on a MX67 firewall and verify internet connectivity
	# If you can access the internet when connected directly to port 2 on the ~~firewall~~ you will need to troubleshoot connectivity to the switch		# If you can access the internet when connected directly to port 2 one the MX64 or Port 3 on the MX67 you will need to troubleshoot connectivity to the switch
	# If you are unable to access the internet when connected directly to port 2 on the firewall, contact the Global Service Desk		# If you are unable to access the internet when connected directly to port 2 on the MX64 or Port 3 on the MX67 firewall, contact the Global Service Desk

	== b) Status indicator is blinking white ==		== b) Status indicator is blinking white ==

NormanKR at 18:57, 13 January 2023

2023-01-13T18:57:41Z

← Older revision		Revision as of 18:57, 13 January 2023
Line 10:		Line 10:
	## The Firewall indicator light will be orange, then rainbow colors and then eventually blinking or solid white which is the operational state. See more details about light colors below.		## The Firewall indicator light will be orange, then rainbow colors and then eventually blinking or solid white which is the operational state. See more details about light colors below.
	## If the Firewall does not eventually get back to a solid White light then call the GSD.		## If the Firewall does not eventually get back to a solid White light then call the GSD.
	~~## The GSD will verify that the Firewall does not have the PPPoE feature enabled and may ask you to insert a paperclip in the little hole to reset the firewall.~~
	# '''WARNING/VPN DOWN''' - The firewall is able to communicate with the Cisco/Meraki website but the Virtual Private Network (VPN) is down or the Meraki website is not able to connect to the Meetinghouse Facility zone if one is present.		# '''WARNING/VPN DOWN''' - The firewall is able to communicate with the Cisco/Meraki website but the Virtual Private Network (VPN) is down or the Meraki website is not able to connect to the Meetinghouse Facility zone if one is present.
	## Follow the same steps in the OFFLINE status above.		## Follow the same steps in the OFFLINE status above.

NormanKR at 21:10, 12 January 2023

2023-01-12T21:10:37Z

← Older revision		Revision as of 21:10, 12 January 2023
Line 3:		Line 3:
	Church Network Manager (CNM) gets the firewall status from the Cisco/Meraki website. The firewall status will be one of the following:		Church Network Manager (CNM) gets the firewall status from the Cisco/Meraki website. The firewall status will be one of the following:

	# '''ONLINE''' - the Firewall ~~in the meetinghouse~~ is able to communicate with the internet and with the Meraki website.		# '''ONLINE''' - the Firewall is able to communicate with the internet and with the Meraki website.
	# '''OFFLINE''' - the firewall is not able to communicate with the Meraki website. This could be for the following reasons:		# '''OFFLINE''' - the firewall is not able to communicate with the Meraki website. This could be for the following reasons:
	## The Internet Service Provider's (ISP) connection to the property is down.		## The Internet Service Provider's (ISP) connection to the property is down.

NormanKR at 21:09, 12 January 2023

2023-01-12T21:09:26Z

← Older revision		Revision as of 21:09, 12 January 2023
Line 1:		Line 1:

	== Firewall Status - Cisco/Meraki MX64, MX65, MX67, MX68 or MX68W~~[edit \| edit source]~~ ==		== Firewall Status - Cisco/Meraki MX64, MX65, MX67, MX68 or MX68W ==
	Church Network Manager (CNM) gets the firewall status from the Cisco/Meraki website. The firewall status will be one of the following:		Church Network Manager (CNM) gets the firewall status from the Cisco/Meraki website. The firewall status will be one of the following: