Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Boyan1
Boyan1
Getting noticed
Member since Jul 15, 2020
Online
Community Record
49
Posts
7
Kudos
0
Solutions
Badges
yesterday
1 Kudo
@Akeon I totally agree that this is a working solution; however something crossed my mind: isn't doing so dangerous as an evil doer could harvest credentials; simply create a network with the same SSID and supplicants will happily send user IDs and passwords, though auth will fail for the legit supplicants, the fake SSID owner will harvest them and then can use them on the real SSID to auth and get "wire" equivalent access, at least on a network level - far from an open door but one foot in so to speak...
... View more
yesterday
You've gone far - thanks the the screenshot - that warning I think is a stupid windows thing - I’ve seen a specific checkbox in the supplicant policy to suppress that warning and few other “safety” warnings in Windows; I encountered this many moons ago in the NPS world with fully legit paid certs and still - people had to click to connect
... View more
2 weeks ago
Yah but how come in your case (your screen shot) it shows hostname and in my case it shows UUID? Did you do something special in the dashboard to have host shown rather than UUID as it is on mine?
... View more
2 weeks ago
That's the thing, I see some randomly generated name instead of the more human readable name you see, any idea why that might be?
... View more
2 weeks ago
Thank you; I was finishing for some less known thing about the 802.x alliance wireless standards where one can pass parameters via the protocol itself, which Meraki could then harvest and expose on the dashboard. I control the end points so if such thing exists it would be easy to implement....
... View more
2 weeks ago
Hi everyone, When the little slider "Private Wi Fi address" is ON for any iOS device it generates random MAC addresses; which are different from the Apple's factory Wi Fi adapter MAC address. Is there any way to track these deices on a Meraki network? Obviously the APs see that random MAC address so there's no way to marry MAC to a device. Is there a viable way to track a device on a WPA2 SSID (everyone uses the same password) Thanks ~B
... View more
@PhilipDAth Thank you but what do you plug here? Azure Cloud PKI does NOT expose any end points on the public Internet to where the MR can be pointed to?
... View more
Hi everyone, It's April of 2024, Microsoft Cloud PKI for Microsoft Intune has been out for some time and it looks very promising for AAD-only joined devices but how do we hook our MRs to it so one can do enterprise 802.11x based on PKI certificate auth (device based auth)? https://learn.microsoft.com/en-us/mem/intune/protect/microsoft-cloud-pki-overview I know how to do it the legacy way, with on-prem CA etc EAP-TLS and RADIUS as the last mile authenticator to the Meraki AP but this "Cloud PKI" is totally new. It promises to eliminate on-prem CA, the InTune connector and ton of other heavy weight. Anyone gone down that road? What endpoint would the APs talk to? What profile to setup the SSID under? So many unknowns? Thanks ~B
... View more
Labels:
- Labels:
-
Interference
-
Other
-
SSID
Mar 12 2024
6:37 AM
2 Kudos
@cmr Yah I think we maybe seeing different causes for a similar symptom here, your case is pretty cut a dry, concrete causality, for the rest, we don't use POE so power brick IMHO is an unlikely cause. That being said, I am sure support isn't 100% consistent either with their training and often it comes down to human decision when faced with gray branch logic circumstances. I'm glad @Brash mentioned the internal MX-25065 issue, that's what I was trying to get to but never did with support, not that we can see what it says or anything but it's good to not chase ghosts and have some evidence instead...
... View more
Mar 12 2024
6:20 AM
@Brash Keep us posted as to what support says about your newly discovered MX75 reboots. With me they were very concrete - hardware panic, not fixable by firmware - swap. I didn't even have to imply RMA, they did it surprisingly willingly...
... View more
Mar 5 2024
2:52 PM
Nope, no POE devices. The original crashing MX75s had the older style PSUs so if you're saying that the crashing replacements came with the new PSU (pictured) and well... they're still crashing I would say that might rule out a PSU?
... View more
Mar 4 2024
7:27 AM
2 Kudos
@cmr The original appliances bricks are gone so I couldn't take a pic (they were different from the replacement shown here) but the replacements use this one:
... View more
Feb 29 2024
6:34 AM
2 Kudos
@DarrenOC All support would share is that they see "hardware panic" on their end and immediately offer a swap, I don't even have to suggest it. I didn't think to ask for batch of serial # but the last run our of 4 swaps, the good 2 swaps were individually shipped on separate RMAs and the 2 bad ones came together under the same RMA - go figure.
... View more
Feb 28 2024
1:56 PM
@RaphaelL Yep I specifically pressed to make sure this isn't fixable by firmware (swapping a box is a huge hassle, we're all over the place with no remote hands at the sites), they're very concrete: it's a hardware defect. PS. I'm running MX 18.107.2 on all of them
... View more
Feb 28 2024
1:44 PM
Hey guys, I'm seeing some very strange and unlikely high defect rates with MX75 (support validated of course) where the MX reboot randomly with "panic" hardware error. Support has acknowledged an internal engineering ticket and swaps them with express RMA The problem is that I am seeing 50% defect rates: we just swapped 4 of them and 2 work fine, no more panic reboots but the other 2 experience the same exact issue - random panic reboot. All support can do is validate that YES it's the same issue and RMA them again I'm worried this may continue, what if the second pair swaps is bad too? We do have solid sanity check here since the other 2 are good so the RMA swap is in fact a valid remedy to the issue but how can Meraki send me 2 bad boxes? Anyone seen this before? The defect itself isn't shared with me but it is super obvious to support on their end and I don't even have to ask for RMA - they immediate offer it Thanks ~B PS. this is all brand new gear, CDW sourced, paid top dollar, no BS. I'm getting really worried here about the choice to move to Meraki. What if the switches and APs have similar issues that just haven't been detected by our team.
... View more
Oct 21 2023
3:01 PM
Do tell - what platform can do that and I will gladly dump Meraki - it's budget season now so it's the best time to have this discussion. I'm already furious about Meraki's "co-term" licensing scam and how they forbid your legacy SM free license to exist if you want to escape the scam of co-term; it's phenomenal "sales marketing" if you ask me to force a custom to pick the lesser of 2 evils
... View more
Oct 20 2023
10:28 AM
@Kit_Johnston Thank you for the YouTube link; it's very clear on the features, etc. My only issue with SM is.. well the licensing. Trusted Access is very attractive in every other way so not a dis at all!
... View more
May 27 2023
8:30 AM
That no longer exists in the dashboard, has it changed? Organization --> Summary Report --> Email / Schedule report The last choice is Summary Report and that drops me into the summary report, there aren't any additional branches to choose from past Summary Report
... View more
@Ryan_Miles Thank you for the quick reply Ryan, is the logic publicly known (and available to share with us) which drives the criteria of "if you configure a static IP that is not valid" ? What is the logic to test yes/no whether said static IP is not valid, and then trigger the hunt? And of course my question has part (b) - can that be disabled? Thanks Boyan
... View more
Why does it matter if the management port is a "physical thing" like an RJ45 jack that you plug a cord into and call it "management" traffic or simply an "internal RJ45 logical port" that you don't see but it's the same thing -- a management VLAN?
... View more
Hi everyone, I recently discovered the hard way a hidden "feature" in MS125-48LP to start hunting all available VLANs if Internet is lost EVEN IF the switch is setup with static IP. That's what blows my mind, manually configured switch, losses Internet connectivity, starts hunting all VLANs and obtains DHCP IP in the first VLAN that would offer DHCP even if that VLAN is completely isolated from the Internet so the hunt mechanism is a fail right away but my question is upstream from this - why? Why start hunting if the switch is configured with static IP? The kicker is that even after Internet connectivity is restored, the switch does NOT revert back to its original statically configured VLAN and IP - the only way to do this is to power cycle it. This means that a random brief loss of visibility to Meraki's cloud throws the device into infinite lockout status where recovery is only possible by manual power cycle. Is there any way to disable this marvelous feature? Thanks ~B
... View more
Labels:
- Labels:
-
Interfaces
-
Other
Apr 8 2023
8:16 PM
@alemabrahao Thank you for the quick reply. Totally, I can do custom, however I'm trying to set up this in a future-proof way -- what I want to do is setup custom templates for each unique peer that we need to interface with and then have regular staff just select it from the drop-down instead of messing with the individual parameters of IPsec phases - basically eliminate any room for error by staff who are not exactly the Jedi Master Yoda of VPN; especially on the soil of our VPN peer partners not being very technically savvy either.. Thanks for the unfiltered non-BS answer, nonetheless.
... View more
Apr 8 2023
3:58 PM
@Brash You're awesome, the best outcome is when one's worst fears don't materialize and tags looks super promising, Thank you, will flag as solved once I test this today
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 728 | |
| 2 | 1019 | |
| 2 | 1173 | |
| 1 | 187 |
© 2024 Cisco Systems, Inc.
