Meraki

RaphaelL

Well not really. You will be missing the other "non-critical" dashboard banners. This is like removing the check engine light because it is always on 😂

RaphaelL

I can't find my post about that , but someone from Meraki said that it should be dismissed but that's not the case. Like mentionned this + ads for cameras and sensors are superrrrrrrr annoying.

RaphaelL

If DNS_NAME.mydomain.com resolves to the public/wan IP of the MX and the port-forwarding is configured on the correct interface with the correct LAN info , that should work. Do you have L7 rules that could block the return traffic ? If you remove the allowed IPs in your portforwarding rule , can you test it with a simple online tool ( a.k.a ismyportOpen ? )

RaphaelL

Yes that is a big concern , however I'm simply questioning your L3 rulebase. Don't you have a implicit deny at the bottom ? ( if those rules are outbound , as mentionned by michalc )

RaphaelL

The public IP of your HUB and 'WAN' IP of your spoke. UDP 4500 if you use the default ports.

RaphaelL

In that case the interface would be 'internet' or 'internet 1'

RaphaelL

Hi , I would start with a packet capture on the WAN interface(s) of your spoke. Do you see VPN traffic going to HUB B ? What does the page VPN status page reports ?

RaphaelL

Cellular has been a big mess since 18.107 so , no surprises here.

RaphaelL

That issue has always been present. I can find about a million of these logs per week : Our scanner is 2.2.2.2 and the remote target is a Meraki MS switch 1.1.1.1. The source and destination are inverted so SecurityCenter reports the wrong IP to the wrong client description. It shows that 2.2.2.2 is the MS switch , which is false. I opened a couple tickets about Security Center issues in the past and I don't think I have seen any updates / improvements about this page in years. Nothing was ever fixed so I stopped bothering about it. Your issue might be slightly different, but I just wanted to say that issues with reporting are frequent with SecurityCenter in my experience.

RaphaelL

This is such a great idea ! I already have a few names in my head 😉 ( including the Community Management team of course 😋 )

RaphaelL · ‎Mar 4 2025

Hi , After reading and trying AI-RRM , I have a few questions : 1-AI-RRM is available as an Early Access feature in the US and EU regions. AI-RRM is not yet supported in Asia, ANZ, Japan and Canada. I'm currently in Canada with the reg domain IC and AI-RRM & FRA seems to be working just fine. Is this statement still correct ? 2- Will auto Busy hour work with templates? No, auto Busy hour is not supported on templates. This test network is configured with a template and busy hours are available as a local override. Is the statement about templates still acurate ? Thanks ,

RaphaelL · ‎Mar 3 2025

Great catch ! Thank you so much for following this up ! Cheers !

RaphaelL · ‎Mar 3 2025

My bad , I was expecting the API index ( https://developer.cisco.com/meraki/api-v1/api-index/ ) to return something related to 'roam' but since the 'roam' is captured inside eventdata "eventData": { "state": "11", "connAttempts": "3", "totalConnTime": "0.590", "reassoc": "1", "roamAp": "xx:xx:xx:xx:xx:xx", "roamApMac": "xx:xx:xx:xx:xx:xx" } then it gets pretty hard to know what could eventData contain. I would have never figured that out without randomly trying the endpoint or reading this post.

RaphaelL · ‎Mar 3 2025

Hi , Might be a good idea to update the API doc to reflect the reality : Maybe more user ( including myself ) would use some endpoints if we knew what they would return before trying them

RaphaelL · ‎Mar 3 2025

Hi , I don't see that anywhere in the documentation and I can't find any endpoint that would return anything related to roams ☹️

RaphaelL · ‎Mar 3 2025

Have you tried with this : "Accept": "application/json"

RaphaelL · ‎Mar 3 2025

Mine is under MX 19.1.7.1 and after "disabling/renabling" IPS it didn't work , so that might be a different bug...

RaphaelL · ‎Feb 27 2025

Well ! Glad it's working ! 😏

RaphaelL · ‎Feb 27 2025

Hi , I'm using this endpoint with success https://api.meraki.com/api/v1/organizations/xxxxx/auth/radius/servers [{"serverId":"xxxx","name":"xxxx","address":"xx","modes":[{"mode":"auth","port":1812},{"mode":"accounting","port":1813}]},{"serverId":"xxxx","name":"xxxx","address":"xxxx","modes":[{"mode":"auth","port":1812},{"mode":"accounting","port":1813}]},{"serverId":"xxxx","name":"xxxx","address":"xxxx","modes":[{"mode":"auth","port":1812},{"mode":"accounting","port":1813}]},{"serverId":"xxxx","name":"xxxx","address":"xxxx","modes":[{"mode":"auth","port":1812},{"mode":"accounting","port":1813}]}] Can you paste the complete URL that you are using ?

RaphaelL · ‎Feb 27 2025

Yup ! nasty bug that is so easy to reproduce that I'm wondering why is it not fixed yet

RaphaelL · ‎Feb 27 2025

Update. The core of the issue appears to be fixed in MR 31.1.6. I'm still waiting on the official fix from Microsoft which should be weeks away.

RaphaelL · ‎Feb 26 2025

Hi , Are you using a MX ? Any content filtering applied ?

RaphaelL · ‎Feb 25 2025

Still broken on my end.

RaphaelL · ‎Feb 24 2025

After digging a bit deeper , the stats look accurate. From Jan 24 - Feb 24 = getOrganizationSummaryTopAppliancesByUtilization shows 10 HTTP 429. My client logs also show 10 HTTP 429.

RaphaelL · ‎Feb 21 2025

Correct. They are still showing up on the main page ( where the graph is )

About RaphaelL

RaphaelL

Raphael Letourneau

Community Record

Badges