I manage Meraki's corporate networks. Ask me anything.

[PhilipDAth]

Are you a bot?

[chilsenbeck]

nope! I am a person. I've been at Meraki for 7 years and run internal IT operations.

[Uberseehandel]

Hi

I am struggling to get Chromecast working casting from a smartphone that is attached to an SSID that is not on the same VLAN as the wired Chromecast device. Works fine when they are on the same VLAN, but even following Google's instructions and setting up some ACL entries, along with activating Rendezvous, I am getting nowhere. Do any of the gnomes cast?

This is a bigger problem than just streaming music or radio, most of the home "smart" devices and much of the IOT kit is not secure so it has to be on a VLAN of its own.

[chilsenbeck]

we're working on a new streaming device called Gnomecast- stay tuned! 

[PhilipDAth]

What is the deepest you stack your switches? 

[EricWenger]

I'm using Meraki MX to manage security on my network in conjunction with Umbrella / OpenDNS. When Umbrella throws off an alert about a device doing something funky, why can't I easily tie that to the activity from a device within my network via the Meraki dashboard? I read something about needing not one, but two VMs to do this...

[EricWenger]

Or am I missing something??

[Uberseehandel]

---

@chilsenbeck wrote:

we're working on a new streaming device called Gnomecast- stay tuned! 

---

I searched Gnomecast and found this . . .

[MRCUR]

What kind of Meraki hardware do you guys deploy? Care to share the non-Meraki stuff too? 

Do you use Auto VPN between the offices? 

How do you guys handle WiFi auth? 

[chilsenbeck]

We're full stack Meraki (obviously). UCS servers, and some various ISR/ASA/Catalyst stuff at datacenters. Big fan of AutoVPN at all our sites- we even drive some voice and TP traffic over VPN.

WIFI auth is cert based Radius (AD).

[EricWenger]

User complains that he cannot use Steam for gaming on the network due to security controls I have in place via Meraki. I look in the Firewall. I see there is a simple way to block Steam under the gaming controls at Layer 7. Is there an equally easy way to allow?

[PhilipDAth]

@EricWenger you could whitelist the user if you don't want them to have any restrictions.

[EricWenger]

I don't know 'bout that!

[EricWenger]

I'm not interested in a free-for-all. But just curious. How would Meraki know the user. My users authenticate to devices that are on my network. They don't authenticate to Meraki...do they?

[chilsenbeck]

---

@EricWenger wrote:
I'm not interested in a free-for-all. But just curious. How would Meraki know the user. My users authenticate to devices that are on my network. They don't authenticate to Meraki...do they?

---

Check out this guide for whitelisting clients:

https://documentation.meraki.com/MX-Z/Group_Policies_and_Blacklisting/Blocking_and_Whitelisting_Clie...

[CarolineS · Accepted solution]

Locking this thread; if you have questions specific for Meraki's head of IT, Chris (@chilsenbeck), feel free to start a new topic and @mention him!