Meraki

KRobert · ‎Jul 8 2021

Thanks @PhilipDAth. I started down the profile path at one point and have visited your site before. Simple and really helpful. I knew that Meraki had pointed it out in their documentation before, but wasn't sure where until today. https://documentation.meraki.com/MX/AnyConnect_on_the_MX_Appliance/Client_deployment "An AnyConnect profile is a crucial piece for ensuring easy configuration of the AnyConnect client software, once installed. The MX does not support the use of custom hostnames for certificates (e.g. vpn.xyz.com). The MX only supports use of the Meraki DDNS hostname for auto-enrollment and use on the MX. With the Meraki DDNS hostname (e.g. mx450-xyuhsygsvge.dynamic-m.com) not as simply as a custom hostname, the need for AnyConnect profiles cannot be overemphasized. Profiles can be used to create hostname aliases, thereby masking the Meraki DDNS with a friendly name for the end user. " I used your profile creator and it worked perfectly. Thanks for your help on this!

KRobert · ‎Jul 6 2021

I know this was a feature early on, but is Meraki planning to setup the AnyConnect Client VPN configuration so that we can import our own SSL certificate to login to the server? Or change the hostname to a custom hostname?

KRobert · ‎Jun 30 2021

I have a new avatar! I was fishing...not phishing!

KRobert · ‎Jun 24 2021

are you planning on utilizing 802.1x authentication on your switchports? If you are take caution with the MS120s. There is a known bug that the MS120 (all versions) is not stable when you make a change to the switch with Access Policies enabled, it will cause the switch to timeout and possibly even reboot. We had to end up replacing the 120s we purchased with 210s. My suggestion is go with the MS210-48LP or MS210-48FP. We replaced our Catalyst 2960s and 2960x switches with the MS210s. They have better CPU handlining physical stacking capabilities then the MS120 switches.

KRobert · ‎Jun 17 2021

My thoughts exactly! Nice @BlakeRichardson

KRobert · ‎Jun 17 2021

Thanks @DarrenOC. I know. My personal preference is the "Make a Wish" flare the button had. Anyone else feel the same?

KRobert · ‎Jun 17 2021

Logged in today and went to make a feature request and realized the "Make a Wish" button has been changed. "Give your feedback" In my opinion, worst update Meraki has done. Where is the flare in "Give your feedback." The "Make a Wish" feature request was unique and added a little fun to the feature request process. I think we should all put in "feedback" to bring back the wish button! #WishBack. Thankfully they didn't get rid of the secret Miles, the platformer game. Anyone else notice this recently? Who's with me!

KRobert · ‎Jun 16 2021

Thank @lpopejoy. That answers the question of risk for me. I am going to wait until GA for this release. Thanks everyone!

KRobert · ‎Jun 4 2021

Hello, Who has made the switch to the Firewall Policy Object in their dashboard? Is this feature still early beta and has a lot of bugs or is it basically like the "beta" the new dashboard was in for a couple years, but everybody used it like it was GA? I want to switch over to the new Policy Objects, but we run a zero trust, deny all, then allow approach so I don't want the conversion from IP to objects to break anything. Who has done this? Is it worth it? How much time has it saved you? Any failed conversion stories? Any information would be helpful.

KRobert · ‎Jun 4 2021

Well done @Tom236 It looks great! Those 1ft cables to a patch panel definitely make cable management easier. I agree with @DarrenOC on waiting for the upgrade 😁

KRobert · ‎Jun 4 2021

I definitely see your point for 50+ sites. Have you looked at the Inseego Skyus 160? We used the Inseego SA2100 (previous model) and I don't believe you need a license for that. We just replaced our SA2100s that worked for us for years with the MG21 for better integration with the Dashboard, but they are still working without issue. https://inseego.com/products/enterprise/skyus-160/ https://www.tessco.com/product/sa2100-at-t-3g-4g-lte-gateway-telemetry-bundle-222571

KRobert · ‎Jun 3 2021

@Peter-Loyen, what setup do you have that is making the External 4G Modem/MG elaborate and expensive? We have been using these last two options for years now (recently moved to the MGs) without issue. We sometimes even run entire locations with 40 plus devices on 4G WAN as the primary.

KRobert · ‎Jun 1 2021

Here is a good article on MX Sizing and how to choose the best option for your setup. https://www.willette.works/meraki-mx-sizing/ We have 2 DCs and we utilize two sets of MX250s for our environment with about 40 spoke networks. In each DC we have an HA pair running on 1-arm mode on the LAN. This is for all Site-to-Site VPN traffic. Then we have an HQ pair of MX250s acting as a our edge firewall routers, separate from our site-to-site VPN. This way your firewall wall is independent from your VPN traffic.

KRobert · ‎May 25 2021

My company has kept 6 years of our network rack pictures so here is a time-lapse from 2017 to 2021 of how our care for network organization has developed over the years. We went from stacking everything on each other to a neat rack with a Meraki MX,MS,MR, & MG. 2015 - Yes, that is a gas line going to a furnace. 2017 - Ahh a new rack, multiple UPS units, a phone switch and clean cabling. 2021 - More cable organization, the MS 210 looking great, no more phone switch and an MG as the backup WAN2 for the MX. Full stack Meraki! It has been a process, but things are looking much better than 2015!

KRobert · ‎May 25 2021

I missed the "good ole days" of 5K modems and using CLI for everything so I can't speak of any stories that include that, but I do remember in high school (06-09) we discovered web proxies to get around the school firewalls. You could google Web Proxy and get a list of 20-30 proxies and basically you'd run through the list until you found one that worked. Nothing like brute forcing your way past a school firewall. We also discovered that each computer had the public folder and we would install the PC version of Halo on them. Knowing this and that each computer was connected to the LAN, we had huge LAN parties between classes with sometimes 20-30 people playing Halo on the school's network. The only way the Technology team discovered us doing it was because the Halo game was storing data locally and filling the computer's drive space up to the point where the computers were becoming unusable. It was so bad, they had to make an announcement about it... which stopped nobody. Never underestimate the drive a bunch of kids in school have to play video games. They have nothing but time to try to break out and they definitely will! Ahh, the good ole days!

KRobert · ‎May 11 2021

What modem did you purchase and what country are you in?

KRobert · ‎Apr 20 2021

Best sun glasses on the market! Priceless!

KRobert · ‎Apr 16 2021

Great work @Inderdeep! What is your award winning blog site?

KRobert · ‎Apr 16 2021

I started having the same thing when we switches over to MS switches from Cisco Catalyst. Let us know what you find. My guess is that support can do it on the back end.

KRobert · ‎Apr 15 2021

Thanks @rhbirkelund! I do keep that in mind and when I order, if possible, I always stick with at least an n+1 or n+2 rule. Redundancy is key, no matter the support or vendor.

KRobert · ‎Apr 15 2021

Welcome @FelixSantiago! You'll enjoy working with Meraki equipment!

KRobert · ‎Apr 15 2021

Hi @Sabrina1, Meraki offers 24x7 on-call support 365 days a year for all of their equipment. This comes with the purchase of your MS license you purchase with the switches. Their RMA turnaround time is pretty quick as well. Sometimes less than 24hours. https://meraki.cisco.com/support/

KRobert · ‎Apr 14 2021

The link @DarrenOC provided first has a nice chart of what MS models support what kind of stacking. https://documentation.meraki.com/MS/Stacking/Switch_Stacks

KRobert · ‎Apr 14 2021

Very cool!

KRobert · ‎Apr 14 2021

As @DarrenOC mentioned, virtual stacking isn't really stacking. It is a play on words for the dashboard. If you have multiple switches in a network, and go to Switch-> Switch Ports in your dashboard, you'll see all your ports from all of the switches together. This is similar to how a stacked set of catalyst switches would look like if you did a "show interface status" command. From there you select multiple ports from different switches and make modifications for them from the dashboard in one area. Virtual stacking "virtually" stacks all of the ports in the dashboard together, but the switches are still entirely independent from one another. Hope this helps!

About KRobert

KRobert

Robert Kremnitzer

Community Record

Badges