Meraki

SoCalRacer · ‎Jun 10 2019

Is this more for just good measure to reboot APs weekly or do you manually change names on the problem APs that you want to get the weekly scheduled reboot?

SoCalRacer · ‎Jun 10 2019

This link should help you with setup. https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Configuring_Simple_Guest_and_Internal_Wireless_Networks

SoCalRacer · ‎Jun 10 2019

Create 3 networks. Default, Production, and Testing(Beta). Change the settings in the networks accordingly, that way Default has no changes. Production has your confirmed good working changes, and Testing is the ones you are working on.

SoCalRacer · ‎Jun 10 2019

I am assuming you changed the port. Typically 32400 is the port used for this. My recommendation would be to revert to default, then test, when you get a working config then change the port. Below are some Plex links that might help. Also might do a packet capture to verify the traffic is hitting the MX. Also something to make sure is that you are not behind the MX when trying this (use outside connection, LTE, etc.) https://support.plex.tv/articles/200289506-remote-access/ https://support.plex.tv/articles/200931138-troubleshooting-remote-access/

SoCalRacer · ‎Jun 6 2019

Possibly they think you have public IPs for both devices. Otherwise they might be confused with what port forwarding is.

SoCalRacer · ‎Jun 6 2019

Settings > General > Profiles & Device Management > Meraki Management. When you do that on the iOS device do you see the Meraki Management profile? It sounds like there might be a problem with the profile.

SoCalRacer · ‎Jun 6 2019

Not sure which email verification you referring to. Have you changed the Dashboard Language? https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Changing_Languages_in_Dashboard If this is related to splash page try this. https://documentation.meraki.com/MR/Splash_Page/Changing_the_Language_on_a_Splash_Page

SoCalRacer · ‎Jun 6 2019

Photoshop or Illustrator will work, or many other paid software. If you are looking for free/opensource/cross-platform try this https://inkscape.org/ Not JPG or PNG, but Chrome will open the SVG and you could print to PDF from there

SoCalRacer · ‎Jun 5 2019

@MOTAT wrote: Can this be done by locking down to a specific email address instead of a whole domain? Thanks Directly I don't think so, but you could allow it for the entire domain. Then on your email side block email that comes from these sponsored guest requests to all email addresses except the one you want to be used.

SoCalRacer · ‎Jun 5 2019

In my experience whitelisting these ID events doesn't work very well or quickly. Your best bet is start by changing the ruleset to balanced instead of security. The next option is change the mode to detection. Then it pinpoints which part of ID is detecting/causing it. The other thing you might check is AMP settings. Also if you can provide the SNORT link to the vulnerability it is detecting

SoCalRacer · ‎Jun 5 2019

Check out Voice setup on Meraki for Jive Voice (YeaLink) The takeaways: L3 outbound rules to the provider's IPs Traffic shaping of the data to the provider's IPs Voice VLAN In my experience I have not had to implement the Voice VLAN, but its worth trying if the first 2 don't resolve the issue. Another place to check is with the provider. usually they have QoS team that can look at the details of the calls and see if their platform is dropping the call. If possible you could try the results on a softphone to see if you get the same issues.

SoCalRacer · ‎Jun 5 2019

Might check Security Center event log https://documentation.meraki.com/MX/Monitoring_and_Reporting/Security_Center

SoCalRacer · ‎Jun 5 2019

Doc showing Remote Assistance uses port 3389 https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-xp/bb456978(v=technet.10) Assuming this is correct, even with all the correct setup to allow 3389 and or forward ports, you may still run into issues with Intrustion Prevention. Check the security event log https://documentation.meraki.com/MX/Monitoring_and_Reporting/Security_Center If you see Microsoft Windows Terminal server RDP over non-standard port attempt then Intrustion Prevention is causing the issue and you will need to adjust . I believe balanced ruleset is the option, but you may have to move mode to detection also. YMMV These options may come with security risks and in that case the recommended action is to be connected to a VPN (Client or Site-to-Site) to use 3389 or use a different solution as 3389(RDP) is pretty vulnerable.

SoCalRacer · ‎Jun 5 2019

Check the wireless firewall rules. Do you have any rules in there?

SoCalRacer · ‎Jun 5 2019

Another option I have seen with this is using the API to change the Guest password daily. Then you can send an email or post to a collab tool so the correct people have the password each day. Also you could restrict access to session time like 1-8hrs. If employees are using the wifi and not supposed to that is an option. Last option is start blocking known mac address that are not supposed to be accessing it. In general with security I feel that making it too time consuming or difficult to access will deter most users/offenders.

SoCalRacer · ‎Jun 4 2019

Kind of interested why you want the public IP of a mobile device, assuming alot of them will be carrier Public IPs. This link below shows the additional field included public IP. https://dashboard.meraki.com/api_docs#list-the-devices-enrolled-in-an-sm-network-with-various-specified-fields-and-filters

SoCalRacer · ‎Jun 4 2019

Confirmed this on a MX67 w/ 14.39 firmware: Disabling via the dashboard leaves the light green. Disabling via local status page shuts it down and port goes gray.

SoCalRacer · ‎Jun 4 2019

Mounting the AP on the top side of the drop ceiling is definitely possible and can run in production. It just might not get the results you want or be the easiest to access.

SoCalRacer · ‎Jun 4 2019

I believe the below links are what you are looking for. https://dashboard.meraki.com/api_docs#return-the-clients-daily-usage-history https://dashboard.meraki.com/api_docs#return-the-clients-network-traffic-data-over-time

SoCalRacer · ‎Jun 4 2019

Not sure what you mean by subsidary. Are you asking if you can use a MX to be a failover for a Sonicwall 9200?

SoCalRacer · ‎Jun 4 2019

I think this disables traffic. I don't think it is a power down. Have you tried disabling the port from the local status page?

SoCalRacer · ‎Jun 4 2019

I am assuming this is a MR33. In a single AP environment it would be ok. In a multi AP environment best practice is to mount them with line of sight in a triangle or square placement. If you are worried about signal you can place it temporarily and do a site survey https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Conducting_Site_Surveys_with_MR_Access_Points Info about range and mounting https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Access_point_range_and_signal_strength_maximization MR33 Install Guide https://documentation.meraki.com/MR/Installation_Guides/MR33_Installation_Guide Other MR install guides https://documentation.meraki.com/MR/MR_Quick_Start

SoCalRacer · ‎Jun 3 2019

If the networks are across different Organizations then no not directly. You could use @jdsilva 's API method in that case.

SoCalRacer · ‎Jun 3 2019

I didn't think Umbrella supported Android devices with a client. I believe you could point the DNS to umbrellas servers with a policy. Also no mention here. https://docs.umbrella.com/deployment-umbrella/docs/2-prerequisites-update Windows and Mac devices you should be able to download the installers and follow below for help pushing. https://documentation.meraki.com/SM/Apps_and_Software/Installing_Custom_Apps_on_Windows_and_Mac_Devices

SoCalRacer · ‎Jun 3 2019

You do not need a SM license to enable Android Apps within the Chrome OS.

About SoCalRacer

SoCalRacer

Community Record

Badges