Meraki

cmr · ‎Aug 30 2020

@and12345 can you send the events to a syslog server where hopefully we can see why there are so many events and why they are being dropped? I seem to remember there can be a storage issue on the small MXs, might be worth getting support to take a look at that.

cmr · ‎Aug 30 2020

@and12345 if you ask the support team they can see more metrics, having more clients connected than recommend doesn't automatically cause issues, we often have 100+ going through MX64/5/7 for the public internet connection at our venues but they are running the enterprise software with little in the way of policies and many of the clients are smartphones only doing occasional background checks. However our MX tend to sit at about 5-10% CPU load...

cmr · ‎Aug 30 2020

@PhilipDAth the SSIDs on the APs I listed the NTP queries from are in bridge mode. I guess I must be missing something, but why would the client NTP traffic appear to come from the APs management IP address when all other client traffic comes from the client's IP? Does the MR proxy or relay the NTP traffic?

cmr · ‎Aug 29 2020

@Tazio4436 that message is just warning you that you might end up with more tunnels than the MX can handle. It won't automatically fail, but Meraki are suggesting you use a smaller address pool to limit the number of client VPN users. It will allow you to save, but keep an eye on the number of clients and respective load on the MX.

cmr · ‎Aug 29 2020

Welcome to the community @Anwar-Hossain we all came here to learn and now like to help others get the most out of the Meraki equipment. I'd quite like Antarctica too, as I don't think I'd get any hayfever there!

cmr · ‎Aug 28 2020

@PhilipDAth that's what I did and was somewhat surprised to find one network with all ~25 APs using two Ip addresses and a second network with ~10 APs using six different ones...

cmr · ‎Aug 28 2020

@Q313 from the document linked to by @DarrenOC : Public IP - The public IP address from which the remote MX can be contacted. This can be found on the remote MX in Dashboard under Security & SD-WAN > Monitor > Appliance status > Uplink > Configuration > General > Public IP: i.e. you can only build a tunnel to the device interface IP, not one of the other public IP addresses in the public range you have on the WAN port. If you have two ISPs you can build a tunnel to either WAN port IP address.

cmr · ‎Aug 26 2020

@MinnesotaKid there seem to be quite a few in use, just checked two networks of mine in the UK and the below are all used as NTP servers for APs: 185.120.34.123 - time.netweaver.uk 176.58.109.199 - time.videxio.net 185.83.169.27 195.219.205.9 85.199.214.98 81.21.65.168 - ns3.turbodns.co.uk 185.53.93.157 - ntp2.wirehive.net 51.89.151.183 - 183.ip-51.89.151.eu Seems a bit of a mixed bag to me...

cmr · ‎Aug 25 2020

@phanlawi is the line simply being overloaded? what are the usage levels at the time of the packet loss?

cmr · ‎Aug 23 2020

Under Network-wide/General there is a section called Device Configuration and there you can control if the local status page is enabled, perhaps it is disabled?

cmr · ‎Aug 21 2020

Are you having actual issues as we have 100+ APs at 8 sites. I visited 5 this week running either 26.8.1 or 27.4 and didn't have any issues when roaming round the buildings. We have about 20-50 wireless devices at each site at all times and many more when they are open. iPads, iPhones, PDQs, Android phones, Windows laptops, Macbooks, Kiosks etc.

cmr · ‎Aug 17 2020

For the 5GHz band I know they need to get each model certified to be able to go to higher power levels and perhaps the same applies to the 2.4GHz band

cmr · ‎Aug 17 2020

@PJ51182 we are running a couple of MR36s in the UK with 27.4 and indeed get the same issue as you, both were running on 12 with 5-30 set on the 2.4GHz band. I tried overriding one of them and and if you pick 13 upwards then the same warning about the radio being incompatible comes up.

cmr · ‎Aug 15 2020

If this is a 5GHz radio then some of the frequencies have different maximum power ratings, what jurisdiction are you in and what channel are they on?

cmr · ‎Aug 12 2020

@ToryDavIF the MXs are using the ISP DNS and are fine, why not just use the ISP DNS for the switches as well?

cmr · ‎Aug 11 2020

Yes, the Merakis are really aimed more at commercial uncontended connections where you'd often buy 200Mb out of a 1Gb tail for say VPN traffic and another 300Mb for Internet traffic and put different devices on each port of the prociders edge equipment. A case in point being one of our venues where the SD-WAN MXs are given 200Mb of one connection and 30Mb of another with the Internet MX using 70Mb of one and 100Mb of the other. We therefore have 400Mb in use but not all through a single device.

cmr · ‎Aug 11 2020

@PhotoJoseph they are additional, so if you had two 50Mb connections you could transfer data at 100Mb. Bear in mind that the total device throughput is 250Mb.

cmr · ‎Aug 11 2020

Excellent @Marco_812 , glad you got it working, definitely time to go home early now for a well earned 🍺

cmr · ‎Aug 11 2020

Fixed now for both MR and MS, MR goes to 26.8.1 and MS to 11.31, still not SRC for MRs:

cmr · ‎Aug 11 2020

@Darren8you really want to go to 27.3, it is much better for the Wi-Fi6 APs If you are on 26.6.1 it will not update.

cmr · ‎Aug 8 2020

Thanks @MeredithW , finally made it after innumerable 5th places! Congratulations also to @Johan_Oosterwaa, that's how a lot of the All Stars first got noticed 😎

cmr · ‎Aug 7 2020

@Seshu so why are 26.6.1 and 26.8.1 both listed as stable releases, surely one or the other should be the stable release?

cmr · ‎Aug 7 2020

@Kydu250 we have used quite a few twinax DAC cables and they are VERY fussy. We have found that Dell cables with Dell switches tend to work quite well when connected to Pure arrays, Dell cables connected between Dell servers unsurprisingly work well, but Dell cables into HP switches don't work. Between manufacturers you are much better using fibres and the manufacturer supported SFP+ modules. The issue is that with a DAC the devices at both ends have to be electrically compatible and this doesn't always seem to be the case.

cmr · ‎Aug 7 2020

@Seshu so a network with a single MR36 and a loaf of MR33s would upgrade to 26.8.1 on the MR36 with the MR33s going to 26.8, if I read you right. Yet a network of pure MR33s would upgrade to what, the current stable releases are 26.6.1 and 26.8.1?

cmr · ‎Aug 6 2020

It is possible to use an non-inline MX as your DHCP server, you simply need to give it an IP address on each of the VLANs you want it to give out addresses for. You will also need to add a custom DHCP option for the gateway as by default it gives out itself. The custom option number is 3.

About cmr

cmr

Community Record

Badges