Meraki

RaphaelL · ‎Nov 18 2020

Might have 2 answers here ; Cameras > Configure > General redirects to Network-wide > Configure > General. So 2 and 4 could be correct.

RaphaelL · ‎Oct 22 2020

Thanks for the reply. Should'nt I be able to see the VRRP MAC in the dashboard ? I was expecting to see it in the Warm Space.

RaphaelL · ‎Oct 22 2020

Hi , Is there a way to view the MAC of the VRRP ? In the dashboard I can see the individual MAC of both MX that are configured in WarmSpace. MX1: ends 9e:44 ( Dashboard says PRIMARY ) MX2: ends c2:08 ( Dashboard says SLAVE ) When I click on the edit button ( Security & Sd-WAN -> Spare Status -> Configure warm spare ) the Warm Space MAC showed is the exact same as the MX2 ( ends c2:08 ). When doing a packet capture , the MAC responding to ARP requests is a bit different than the Primary but ends with the same part ( 9e:44 ) which looks to be the VRRP MAC. Why is the warm space MAC different than the VRRP MAC from my packet captures ? Thanks ,

RaphaelL · ‎May 6 2020

Hey there , bumping my old thread. Has anyone got any issues so far with the reauth timer ( 1h ) and their Cisco IP Phones ? Every hour or so we keep having a ' UCM disconnected / is down' sort of message on the phones and it looks to be happening during the reauth. Thanks !

RaphaelL · ‎Mar 5 2020

Sorry , I was out of the office. This org seems to be on n238. I have access to a lot of shards also, I tested on n216 and it is working. I think I'm going to open a case about it.

RaphaelL · ‎Mar 2 2020

Samething. Tried with Postman and still get a 502. Only 2 calls are failing at the moment : switchPortStatuses and switchPortStatuses/packets. Are they dependant on a specific firmware version ?

RaphaelL · ‎Mar 2 2020

I'm using the link https://developer.cisco.com/meraki/api/#/rest/api-endpoints/switch-ports/get-device-switch-port-statuses to test the call. You only need your API key and a valid serial number from your Org.

RaphaelL · ‎Mar 2 2020

Hi there , I'm using the new API call for switch Port status but I'm always getting a HTTP 502. I have also tried the console / debug call from https://developer.cisco.com/meraki/api/#/rest/api-endpoints/switch-ports/get-device-switch-port-statuses but I'm still getting 502. I have tried with switches from MS11.22 to MS11.30 and still no luck. Any clues before I open a ticket ? Thanks.

RaphaelL · ‎Dec 20 2019

Yeah when I get back from vacation I will do that. I'm always asking here first 🙂 Thanks for helping me !

RaphaelL · ‎Dec 20 2019

Sure ! There it is :

RaphaelL · ‎Dec 20 2019

Hi Nolan , This was the alert : The security appliance in the network XXXXXXX was unable to issue an IP address to new clients on subnet 192.168.1.0/24'192.168.1.1 because it has exhausted its pool of DHCP leases. New clients will not be able to connect to the network until this issue is resolved (e.g. by increasing the size of the subnet). It is indeed the DHCP pool that is almost empty

RaphaelL · ‎Dec 20 2019

Hi , I'm always receiving DHCP leases exhausted alerts but when I take a deep look , the DHCP pool is far from exhausted. 10h52 MX came online ( was down for 24h ) 10h54 alarm received 10h56 Validations were made on the MX ( see results below ) I don't get it... We are running 14.39 Thanks !

RaphaelL · ‎Dec 16 2019

Nice ! I didn't think it that way ! I will script that in python. Thanks for the help !

RaphaelL · ‎Dec 16 2019

Thanks for the reply As expected that doesn't work ! Status is either offline or online or alerting. I want to know if an AP is in repeater mode or not. EDIT : I think my first message , wasn't that clear. My appologies Thanks

RaphaelL · ‎Dec 16 2019

Hi , Is there a efficient way to retrieve AP status ? ( online , offline , repeater ) I have not seen an API call for that and you can't see it from the dashboard - Overview - Devices page. Only way I found is to dump all my AP MAC adresses and compare DHCP leases to find if the AP has a lease or not... I have more than 1000++ AP so I can't go network by network to find that info. Thanks !

RaphaelL · ‎Oct 30 2019

What is the error ? Can you share your code ?

RaphaelL · ‎Oct 22 2019

Also 26.6 is out ( yesterday ) still a Beta version but I'm rocking 26.5 without any issues. Might be worth trying 25.14 / 26.6

RaphaelL · ‎Oct 18 2019

Sometimes the website are in the wrong category , there is a tool in the content filtering section to test your URL. If it is indeed misflagged , open a ticket and Meraki will contact their content filtering partner.

RaphaelL · ‎Oct 18 2019

I think you could forward the voice traffic simply by going to Site-to-Site options and select : VPN settings Local networks Name Subnet Subnetting VPN participation Voice /23 from 10.0.0.0/8 unique VPN on

RaphaelL · ‎Oct 17 2019

Curious , what happens if you click on the client in Air Marshal ? You should have additionnal informations about the client in the bottom right corner of your dashboard. Maybe you will notice a different MAC. Also what equipement is doing your DHCP ?

RaphaelL · ‎Oct 17 2019

1 - Which MAC are you looking at on your switches ? The Wired MAC or the Wireless MAC ? 2- Those rogue SSID are often printers with Direct printing , Phones with HotSpot enabled , PC with some features similar to Direct printing. I would take for example this wired MAC : 00:1e:c0:xx:xx:xx from your screenshot . Look it up on my switches , find where this device is at , go on that device and check why it is broadcasting XXXX SSID.

RaphaelL · ‎Oct 17 2019

I love the part : This is rarely indicative of hardware failure, I get atleast 4-5 per week.

RaphaelL · ‎Oct 16 2019

As BrechtSchamp said , IOS devices needs to contact captive.apple.com to validate if the device as access to the network https://discussions.apple.com/thread/7491051 Personnaly , I have whitelisted *.apple.com. But I know for a fact that a lot of people have issues with IOS and splash pages.

RaphaelL · ‎Oct 15 2019

On your MX that is configured in routed mode you should be able to see those options : Security & SD-WAN -> Site-to-site VPN Those options are not available on the MX that is configured as one-arm VPN concentrator

RaphaelL · ‎Oct 15 2019

I think this could simply be done with a split tunnel. https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Settings Sections : Default Route / Tunneling

About RaphaelL

RaphaelL

Raphael Letourneau

Community Record

Badges