Meraki

RaphaelL · ‎Mar 18 2025

I would disable 802.11r for the moment. I'm not sure that Microsoft has released their fix yet.

RaphaelL · ‎Mar 18 2025

Do you have 802.11r enabled on your WPA2-Enterprise SSID ? Your Wave2 aps can't upgrade to MR 31.1.6

RaphaelL · ‎Mar 17 2025

Hi kevin ! Appreciate so much ! thank you for your time

RaphaelL · ‎Mar 17 2025

I found this old topic , but I think they just added this feature :

RaphaelL · ‎Mar 17 2025

Haven't experienced that one. I will keep an eye on that one. Currently running 500 MX on that version.

RaphaelL · ‎Mar 17 2025

Hi , MX network utilization being erroneously exaggerated (causing needless concern about security breaches) You mean the device utilization itself ? If so , everysingle update since MX18.211 I have seen a significant bump in device utilization ranging from 1-15%

RaphaelL · ‎Mar 14 2025

Hi , Does anyone know if it is possible to get the AI-RRM "scores" via API ? I recall seeing Minse's presentation during the last Cisco Live in 2024 and Meraki did graph the score overtime and could compare before/after. I will be trying AI-RRM and I want to have that kind of detail. I searched through the API doc ( including beta ) + OpenAPISpec and couldn't find anything 😓

RaphaelL · ‎Mar 13 2025

Thank you Minse ! We will be trying out AI-RRM very soon ! We have a large MR environnement in Canada ( 3.5K APs )

RaphaelL · ‎Mar 13 2025

https://documentation.meraki.com/MR/Radio_Settings/AI_-_RRM AI-RRM is available as an Early Access feature in the US and EU regions. AI-RRM is not yet supported in Asia, ANZ, Japan and Canada. Is this still true ?

RaphaelL · ‎Mar 13 2025

Is the reg domain IC supported without Canada’s Meraki cloud region ?

RaphaelL · ‎Mar 12 2025

Also "increase access speed" is never a good idea.

RaphaelL · ‎Mar 12 2025

Phil is correct. You might be mixing the Event logs from the devices. Those are in sync with the local time set from the network.

RaphaelL · ‎Mar 12 2025

Well not really. You will be missing the other "non-critical" dashboard banners. This is like removing the check engine light because it is always on 😂

RaphaelL · ‎Mar 11 2025

I can't find my post about that , but someone from Meraki said that it should be dismissed but that's not the case. Like mentionned this + ads for cameras and sensors are superrrrrrrr annoying.

RaphaelL · ‎Mar 10 2025

If DNS_NAME.mydomain.com resolves to the public/wan IP of the MX and the port-forwarding is configured on the correct interface with the correct LAN info , that should work. Do you have L7 rules that could block the return traffic ? If you remove the allowed IPs in your portforwarding rule , can you test it with a simple online tool ( a.k.a ismyportOpen ? )

RaphaelL · ‎Mar 10 2025

Yes that is a big concern , however I'm simply questioning your L3 rulebase. Don't you have a implicit deny at the bottom ? ( if those rules are outbound , as mentionned by michalc )

RaphaelL · ‎Mar 10 2025

The public IP of your HUB and 'WAN' IP of your spoke. UDP 4500 if you use the default ports.

RaphaelL · ‎Mar 10 2025

In that case the interface would be 'internet' or 'internet 1'

RaphaelL · ‎Mar 10 2025

Hi , I would start with a packet capture on the WAN interface(s) of your spoke. Do you see VPN traffic going to HUB B ? What does the page VPN status page reports ?

RaphaelL · ‎Mar 6 2025

Cellular has been a big mess since 18.107 so , no surprises here.

RaphaelL · ‎Mar 5 2025

That issue has always been present. I can find about a million of these logs per week : Our scanner is 2.2.2.2 and the remote target is a Meraki MS switch 1.1.1.1. The source and destination are inverted so SecurityCenter reports the wrong IP to the wrong client description. It shows that 2.2.2.2 is the MS switch , which is false. I opened a couple tickets about Security Center issues in the past and I don't think I have seen any updates / improvements about this page in years. Nothing was ever fixed so I stopped bothering about it. Your issue might be slightly different, but I just wanted to say that issues with reporting are frequent with SecurityCenter in my experience.

RaphaelL · ‎Mar 4 2025

This is such a great idea ! I already have a few names in my head 😉 ( including the Community Management team of course 😋 )

RaphaelL · ‎Mar 4 2025

Hi , After reading and trying AI-RRM , I have a few questions : 1-AI-RRM is available as an Early Access feature in the US and EU regions. AI-RRM is not yet supported in Asia, ANZ, Japan and Canada. I'm currently in Canada with the reg domain IC and AI-RRM & FRA seems to be working just fine. Is this statement still correct ? 2- Will auto Busy hour work with templates? No, auto Busy hour is not supported on templates. This test network is configured with a template and busy hours are available as a local override. Is the statement about templates still acurate ? Thanks ,

RaphaelL · ‎Mar 3 2025

Great catch ! Thank you so much for following this up ! Cheers !

RaphaelL · ‎Mar 3 2025

My bad , I was expecting the API index ( https://developer.cisco.com/meraki/api-v1/api-index/ ) to return something related to 'roam' but since the 'roam' is captured inside eventdata "eventData": { "state": "11", "connAttempts": "3", "totalConnTime": "0.590", "reassoc": "1", "roamAp": "xx:xx:xx:xx:xx:xx", "roamApMac": "xx:xx:xx:xx:xx:xx" } then it gets pretty hard to know what could eventData contain. I would have never figured that out without randomly trying the endpoint or reading this post.

About RaphaelL

RaphaelL

Raphael Letourneau

Community Record

Badges