Meraki

BruceL · ‎Sep 6 2019

I agree, it would be nice if the community had visibility to the existing wish list to comment on and to add additional support for a given wish. This would certainly help in the prioritizing feature enhancements to the product.

spicehead · ‎Aug 19 2019

Was able to block using Santa by Google.

Richard_W · ‎Jul 30 2019

And this of course leaves Mac AppStore apps just hanging out?

jdsilva · ‎Jul 24 2019

jared_f · ‎Jul 24 2019

Sadly no, I installed the Meraki agent on a PC already bound to the domain. Then in order to populate a user the device needs to be enrolled again. I actually did find a use for JumpCloud. To connect to WiFi it is WPA2 Enterprise with AD and your IP gets issued via Windows DHCP. I can fully shutdown my domain and authentication fails over to JumpCloud and DHCP fails over to my Synology HA Cluster and the DNS is changed to 8.8.8.8 and 8.8.4.4 -- that was the only use I found for JumpCloud in the end.

ErnestoSxedal · ‎Jun 24 2019

I have a new avatar!

GOwens · ‎Jun 24 2019

This document is a great help in understanding vlans, thanks for posting.

Jeff_Longley · ‎Jun 21 2019

Just an update - time seems to be a factor. The process is still long and complicated, but it appears the dashboard can be very inconsistent in displaying correct information. As an example, in the DEP view, devices would show as pushed, whereas in client view, the DEP status would be assigned. 24 hours later, everything seemed to have settled down.

Ben · ‎Jun 12 2019

Hi Richard, the "default" traffic shaping rules were not there before, therefore we had to create them manually. Cheers, Ben

MeredithW · ‎Jun 3 2019

Congratulations to our contest winners, @Franzman and @nbentsendk!👏👏👏🎉

TownofMidland · ‎May 30 2019

Lots of trial and error indicates that if I set the Block Encrypted Search option, all GOOGLE web pages in general are blocked. No other search engine is affected.

KMNEP · ‎May 23 2019

@Richard_W Thank you for pointing me to the link. 🙂

Uberseehandel · ‎May 17 2019

@BrechtSchamp I have not used Meraki VPNs before. We have a number of VLANs, including Management, Audio-Visual, IOT, Design-Office etc. In my dreams, I would like to securely(encrypted) extend a sub-set of the main network VLANs (Vectis) to the Z3C network (Acheron) so that when I connect a workstation to Acheron, it behaves as if it were attached to Vectis locally, even if I am at a remote location. The best way of managing SSIDs, is also up for debate. It goes against the grain to set up yet more SSIDs. On another brand's equipment I am able to use the same SSID, validation and password on different networks, and roam between them. Whilst I won't be roaming between networks, it would be an elegant design feature. I must say, I am learning a lot!

Richard_W · ‎May 16 2019

Are the devices corporate owned or BYOD. Apple is pretty strict on which way to go if BYOD; ie not supervised unless the end user is fully informed/consents to having a supervised (ie fully managed device)

FrancoF · ‎May 15 2019

Thank you, devices are MDM enrolled and I already found this option, my need is to schedule it daily.

Richard_W · ‎May 15 2019

And more on the topic that is not yet resolved; I can remote control PC's in SM just not any Macs. Useful except for the fact I have more Mac clients than PC clients. Is anyone able to remote control Macs in SM?

Richard_W · ‎May 14 2019

Apparently that form of traffic shaping (above) had no affect on increasing upload speed over Global bandwidth limits > Per-client limit. The traffic was being held to per-client limit. I came to this elementary conclusion with the simple removal of per-client limit one evening, as is my wont. So I guess I'll need to re-look at this unless anyone else has encountered this?

RubenG · ‎May 13 2019

@Naimro You can do the above as everyone has stated. Set the Wireless SSID to Meraki DHCP and create the SSID that way. Meraki will do all the work for you and assign a subnet for the guests, you will not have any input as to what subnet you can use except that it will be in the Class A subnet of 10.0.0.0/8. This will not allow any communication within the members of this VLAN, but they will be allowed to talk to anything on your wired LAN if you permit, you can go into the SSID Firewall settings and edit its access as you require. Note that if you require the clients to have access to things such as a chromecast or apple tv for presentations this will probably not be a route for you. If you want more control then it will be a bit more work on your end. You can create the VLAN and restrict any local LAN access, or allow depending on your firewall settings. Utilizing this method will allow you to choose a more specific VLAN and add other devices to that VLAN that your Guests will require access to. Here's an example to block a particular VLAN (this allows access within the VLAN but not to my local network): Furthermore, if you need to change the access of the wireless clients by denying specific content per your company policy. You can do that on a per SSID basis under "Firewall & traffic shaping" in Wireless section and it will work on that Guests SSID without affecting the rest of your network, if you do it on the "Security & SD-WAN" it will apply to your entire network traffic, not on a per SSID basis. Basically, if you require more control and have to implement other devices into the Guest VLAN then I would recommend creating a VLAN for this Guest Network applying all firewall rules to segregate the traffic. Otherwise if you just require them to be on a segregated network without impacting your local network, go with the Meraki DHCP option, it's easy and simple to deploy and you can tie in additional layer 7 rules.

Richard_W · ‎May 13 2019

So to clarify your WAN 1 is set at 150Mbps down and up is at 130Mbps and you have an asynchronous 150Mbps from your ISP yeah. And you want to know why this was set as that rather than say WAN 1 being just set at 150Mbps?

Richard_W · ‎May 13 2019

Yeah, real time would be great. What kinda QoS rules have you found that help the most vs an overall per-client global bandwidth limit?

PhilipDAth · ‎May 9 2019

All you can do is given them the Meraki firewall rules and say you need that. You could also try asking if them can open up udp/7351 to any and see what happens. It might be easier. Note that AutoVPN should still work - this will just get rid of the warning in the dashboard.

Richard_W · ‎May 9 2019

Yes it is only a part of Insight. "WAN Health is a part of Meraki Insight, and any Insight deployment will have access to WAN Health without additional configuration/licensing. The WAN Health feature requires a Meraki Insight license enabled in the organization and activated for the network’s MX."

Richard_W · ‎Apr 22 2019

I noted that only one of the ports has any traffic of merit, so it works but not as intended.

CarolineS · ‎Apr 19 2019

@Richard_W wrote: I found a gnome is that an egg? Gnomes are not eggs 🙂

Richard_W · ‎Apr 19 2019

Found another gnome

About Richard_W

Richard_W

Community Record

Badges