Meraki

RaphaelL · ‎Feb 24 2022

Well the fields are all explained on the page of your endpoint : https://developer.cisco.com/meraki/api-v1/#!get-network-events deviceName String The name of the Meraki device which the list of events will be filtered with

RaphaelL · ‎Feb 23 2022

Hi, We have recently configured a SSID using 802.1X and 802.11r is enabled. Upon looking at all the connection logs and keeping an eye on the Wireless Health , I have been able to observe that we are now having lots of events of that type : auth_mode='wpa2-802.1x' ft='1' reason='invalid_pmkid' radio='1' vap='0' channel='40' rssi='36' We are using MR36 and the firmware version tested are 27.7.1 and 28.5. Most of these logs are from mobile IOS devices running IOS 12+++. Dashboard says the devices are 802.11r capable. 1- Do you think that 802.11r in adaptive mode will help ? 2- I have noticed that 28.6 seems to have fixed issues with pmk , I might try that one. Has anyone come across that ? Thanks ,

RaphaelL · ‎Feb 23 2022

Hi , If you are looking for the possible events you could try this endpoint : https://developer.cisco.com/meraki/api-v1/#!get-network-events-event-types

RaphaelL · ‎Feb 22 2022

They could. The Client VPN flow will be over the internet and not in the S2S VPN. Client VPN on Site B -> ( Internet ) Site A -> AWS. In that case having or not the S2S between Site A and Site B is irrelevant That would be one way to do it.

RaphaelL · ‎Feb 22 2022

Hi , So your issue is only present on the MR32 ? Do you have any L2 protection features such as DAI ?

RaphaelL · ‎Feb 18 2022

I'm running a MS220-24P on 14.32 , 2 of my ports are showing High CRC Very high proportion of CRC errors on port 4 Very high proportion of CRC errors on port 10 Both ports are configured as Trunks ( should be access tho ... ) and are autonegociated to 10/100 Full duplex. All my other Apple TV that are not showing CRC errors have negociated at 1000 Full. TLD seems buggy today , can't run the test on my port , but I'm pretty sure I have a cabling issue OR the issue is on the AppleTV

RaphaelL · ‎Feb 18 2022

Hi , it seems to me that the AP has recorded Radar activity on your channels ( 108,144 ) Are you using those channels ? Are the APs registered to the correct Country in the dashboard ? You can manually exclude those channels if these logs persists

RaphaelL · ‎Feb 18 2022

Hi , I'm pretty sure we do have this issue also. What MS version are you running ? Thanks ,

RaphaelL · ‎Feb 17 2022

When displaying the Route table on the MX there are no entries for 192.168.100.0/X ?

RaphaelL · ‎Feb 16 2022

Hi , I have not tested if the firewall page will update by itself , which I supose it does. If you are using Site-To-Site VPN rules , you may have to adjust them, if not you may have nothing else to do on the Meraki side : VPN traffic to both AutoVPN and Non-Meraki peers is only subject to the site-to-site firewall rules and is never subject to global Layer 3 firewall rules. https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior

RaphaelL · ‎Feb 10 2022

There you go : https://downloadmirror.intel.com/715194/ReleaseNotes_WiFi_22.110.1.pdf

RaphaelL · ‎Feb 10 2022

I'm pretty sure that the timer is fixed. Same as the MX ! I will try to forward the documentation about the bug. Check if you have any other wireless NIC that are not AX200 or AX201 in the meantime

RaphaelL · ‎Feb 10 2022

Boom ! I knew it ! There is a known bug on the intel AX200 and AX201 card ! Intel is releasing( or has released ) a new driver that fixes that issue ! We have the exact same issues. Upon re-auth the clients get disconnected 🙂

RaphaelL · ‎Feb 10 2022

Out of curiosity , what is the NIC and model of the Windows computer ?

RaphaelL · ‎Feb 10 2022

Yes that is what I ended up discovering. But this still reinforce the main point : the documentation is way too vague and doesn't contain the right info or correct info. If you look at the documentation for : /networks/{networkId}/events/eventTypes it only shows 1 event versus 60++ that you just showed. It wouln't be that hard to include the complete list into the body of the example. For eventtypes we are luck to have this call that returns all the possible values, but for certain calls we don't have that luxury

RaphaelL · ‎Feb 10 2022

Off topic:I still wish we could disable/enable rules for testing purpose instead of deleting / re-creating them.

RaphaelL · ‎Feb 9 2022

Unfortunately, no. It is indeed frustrating because you have to test individual calls to know the expected values that are returned. Eg : Event Logs ( /networks/{networkId}/events ) . Parameter : includedEventTypesArray A list of event types. A yes a list. A list of what values? You now have to filter thousands lines of logs to find it.

RaphaelL · ‎Feb 9 2022

However, when I add the organizationId( or the organizationId/networks) I get a 404 error. I tested the method with the other networks and only one network returned with 200. I'm not sure I'm following you. The call https://api.meraki.com/api/v1/organizations/{organizationId}/networks It needs a OrgID not a NetworkID. You should be able to list all the networks from that given Org. If it still fails for the same Org , I would open a ticket.

RaphaelL · ‎Feb 9 2022

Has the Org API settings been enabled ? :

RaphaelL · ‎Feb 9 2022

Then the queries would be simply : https://api.meraki.com/api/v1/organizations/ ( with a valid API key ) https://api.meraki.com/api/v1/organizations/{organizationId}/networks ( with a valid Org ID obtained from the previous call ) Simply log into any Org that you have a API key in your browser and paste the urls in the url bar : This is how I test my calls before scripting.

RaphaelL · ‎Feb 9 2022

All networks from the same Org are on the same shard. Do not mix shards ID and Orgs. That is why it is recommended to use the mega proxy api.meraki.com instead of the shard. If you really want to use the shard , you have to make sure that it is the right one.

RaphaelL · ‎Feb 9 2022

So you are trying to Get https://api.meraki.com/api/v1/organizations/ which should return you a list of Orgs that you have access. Then you will be able to retrieve the ''id'' ( which is the OrgID ) and try https://api.meraki.com/api/v1/organizations/{organizationId}/networks with the correct ID. My favorite way to test these API calls , is by using Chrome and logging to the desired Org and then typing the API url in the url bar.

RaphaelL · ‎Feb 9 2022

Could you precise what API call you using ?

RaphaelL · ‎Jan 31 2022

that was also my guess. It seems that it is 1 month on the first seen : firstSeen UTC : 2021-12-07 17:45:44 lastSeen UTC : 2022-01-13 11:39:20 Since I have a ''first seen'' > 30 days, It should be on the last seen

RaphaelL · ‎Jan 31 2022

Hi , Does anyone know how far back can this API call go ?: /organizations/{organizationId}/clients/search https://developer.cisco.com/meraki/api-v1/#!get-organization-clients-search I have found a Client from a month ago ( first seen in december , last seen 2 days ago ) but I was wondering what was the limit. It is usually documented in the API documentation , but it is not. Thanks ,

About RaphaelL

RaphaelL

Raphael Letourneau

Community Record

Badges