Meraki

VRB

LLDP info is back. Thanks.

SonnyB

Thank you very much. For some reason, my Radius Server doesn't have a working IP even though I entered an IP that isn't in use. For example, if I ping this IP I entered for the Radius server, it doesn't ping. I posted on Microsoft's forum and got no reply. Thank you very much, Sonny

Mloraditch

Route Tables would not be wiped out. They are not part of the managed deployment, at worst you might have to adjust the ip where your routes point to. I would not think you would have to adjust their vnet assignment. Especially if you already deployed as NAT mode.

RaphaelL

Hi , Deny LAN won't deny access to the Internet. If you have a MX and MR , I would put the rules on the MX. 1- Deny LAN on the MR 2- Deny RFC1918 on the MX 3- Allow "internet" on the MX That is how we have our Guest SSID configured.

DarrenOC

Meraki MX sizing https://documentation.meraki.com/MX/MX_Sizing_Information/MX_Sizing_Principles

PhilipDAth

You can use this sizing guide to compare the MX100 and the MX95. https://documentation.meraki.com/MX/MX_Sizing_Information/MX_Sizing_Principles

PhilipDAth

>Do we have a way to have different Enterprise Apps configured for different Meraki tenants? The accepted solution is the correct answer. You should only have a single Enterprise App, and then put the certificate thumbprint into each Meraki Dashboard that you want to use that Enterprise App.

John-Yberllan

Hi, Many thanks for the replies. I have got a grace period on the dashboard, so network work back normal. I added one license as renewal when it should have been add device. This cancels out the previous one. It is not easy to understand the dashboard for license as well as understanding the adding of new ones. This element of license is key to the platfrom, which just needs to be made easier.

Mloraditch

Ok yes the API will definitely work. Id take a look at Postman and use a runner in this situation but there are other options like python and such.

Whoreallyknows

Is there some way we can look at traffic analytics logs from before the guest user was connected to the network to see what websites\urls they were visiting on company time?

Gordon-HoC

I appreciate the rapid help with my problem. I thought I'd try to contribute a little something... Powershell isn't the best at providing full error details from a web request. Here's some code that goes the extra mile and extracts the error details such as "unsupported for networks bound to a template" (it has been simplified, but the key bits are here): Try { $MerakiResponse = Invoke-RestMethod -Method Get -Uri "$($URL)$Query" -Headers $Headers # Submit the query to Meraki and pass back the results. } Catch { $ErrorCode = $_.Exception.Response.StatusCode.value__ # Get the error code $ErrorDescription = $_.Exception.Response.StatusDescription # Get the error message # Process the error stream to extract the error details... $ErrorStream = $_.Exception.Response.GetResponseStream() $ErrorReader = New-Object System.IO.StreamReader($ErrorStream) $ErrorFullDetail = $ErrorReader.ReadToEnd() $ErrorDetail = $($ErrorFullDetail -split """")[3] write-host "Error: ($ErrorCode) $ErrorDescription`r`nDetail: `r`n$ErrorDetail" }

Mloraditch

You should perhaps considering going to a CW9163E to increase your lifespan. There is a price difference but you will add 6Ghz capabilities for a more future proof installation. Also the MR76 and 74 use the same MA-ANT-20 antennas so you may not need new ones.

Mloraditch

You should be able to convert and then just buy the relevant Meraki license for your model. I don't believe there is any enforcement on allowing you to convert, just the normal you have 30 days to get a license once it's in the dashboard.

Mloraditch

I'm not aware of this specific issue, but you may want to upgrade to the 17.15.3 RC when you can. Nothing fixed seems directly related, but Meraki doesn't always post all the bugs that have been fixed. EDIT: There was a previous issue that was fixed via a backend change, but it reads as a global change: https://community.meraki.com/t5/Switching/IOS-XE-17-15-2-not-saving-config-changes/td-p/265607/jump-to/first-unread-message

John-Yberllan

CoTerm

Benny2025

hi Meraki Team I submitted a Meraki Go case and I cannot find it today. They asked my below questions When did this issue first start occurring? I replied 8th April. Are other administrators associated with your account also experiencing similar issues? I keyin my colleague's email account:ken.wong@target.com If possible, could you have another administrator attempt to log into the account and remove the two-factor authentication (2FA) requirement temporarily? I asked my colleague to try but it seems failed. I still need the verification code. When I try to open another Meraki case, the page is loading all the time.

Talhaturkdogan

Can you tell us workaround?

PhilipDAth

>You could also rehome the vlans to your firewall When the data flows are not high - this is my preferred approach. I like to do all my firewalling and access restrictions in one place. Switch ACLs can also be applied per-vlan - so you could consider moving these devices into their own VLAN. You can also simply specify the devices address in the source and destination field. If you have an MS Advanced licence, and a suitable switch, you could also consider using Adaptive Policy. You can apply a policy to a specify port this way, using an Adaptive Policy "tag". https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Adaptive_Policy_Overview

alemabrahao

I totally agree, it's high time they gave us this possibility.

mrpackethead_

"I have an MX450 located in a remote datacenter" Yes, that is the likely thing that will need to be done. It is remote enough that it requires some effort to get to, and I was hoping to do this from the keyboard.

AzeemHaider

Thank you all, I decided to create SSID manually as they are only 3. I am using "Meraki Cloud Authentication" under Security --> "Enterprise with" and added user to use SSID, now my question is if I make same SSID in Network B are those use be able to use SSID using their login and password they have, as users Meraki cloud Authentication is Network wide.

Bertolo

Muito obrigado

Mloraditch

I have not personally seen any issues in my mixed environments. Nor have I heard of any from others. I would not wait considering all the possible security issues you could have being that far behind. You could also talk to support and they can put the whole network on 30.x from the backend if there are issues.

Messy

yea that's what we do now but for whatever reason we seem to have multiple sites where some or all VLANs were put on the switches. Probably a hang over from transitioning to Meraki where engineers just set them up the way they were on the old hardware.

DarrenOC

😂🤣 - ok, so seen the other thread. It shouldn’t be service impacting but there’s clearly a recent issue

About Mloraditch

Mloraditch

Matthew Loraditch

Community Record

Badges