About KarstenI

KarstenI

With the actual monitor option, the way you manage the device will not change. If later the Management-option on the Dashboard comes available, all these ways go away and there will be no SSH or local GUI.

KarstenI

Congratulation to all! And what I especially like, is that again a non (or not yet?) All-Star made it to the list of the fabulous four.

KarstenI

Ok, with these answers it's quite obvious ... Meraki really should think about this decision, but at least correct the documentation that is plain wrong.

KarstenI

that, and the CE dashboard is where I looked at.

KarstenI

Hi all, I hope to find an answer here as there should be at least 48 other community members CMSS certified. Was anyone able to recertify the CMSS with other exams or CE points? As per the FAQ, it should be possible: Can the CMSS be recertified by other Cisco certifications? Yes, details can be found on this link - specialist level certifications can be recertified using any of the following methods: Pass any one professional concentration exam Pass one technology core exam Pass any one expert-level written exam Pass any one expert-level Lab/Practical exam Earn 40 CE credits For me, none of these extended the CMSS and it shows to expire this year. Certification support now told me that the only way to recertify the CMSS is to do the exam again. Did the recertification work for anyone else? Have a great day, Karsten

KarstenI

It is definitely mentioned. But there is not as much documentation as with Viptella SD-WAN. It's meant to be magic. Well, very good working magic. If you want to learn more about AutoVPN, these are some resources: https://meraki.cisco.com/blog/2018/06/all-about-autovpn/ https://documentation.meraki.com/MX/Site-to-site_VPN/Meraki_Auto_VPN_-_Configuration_and_Troubleshooting https://documentation.meraki.com/MX/Deployment_Guides/VPN_Concentrator_Deployment_Guide

KarstenI

The only underlay that is of relevance is the connection from the Meraki MX to the ISP. And that is done completely static. The overlay is proprietary and not really documented as in the traditionally Cisco SD-WAN (Viptella).

KarstenI

Forgot to add my user: KarstenI

KarstenI · ‎02-22-2023

well, with that every branch has it’s own spanning tree and there is no need to look at it across the branches. Yes, cleaning up is always a good idea.

KarstenI · ‎02-21-2023

@rhbirkelund has your setup covered with a 99,9% likelihood. But if you have ordered L2VPNs from your ISP and you share subnets between the HQ and the remote branches (which you really shouldn't unless you *really* know what you are doing) that your HQ likely should keep the root and all branch switches should have an inferior priority.

KarstenI · ‎02-20-2023

SSL (or better TLS as SSL is completely outdated) is only the security mechanism to transport the Data. For Site-to-Site VPN, Meraki MX (same as Cisco ASA/FTD) only implements IPsec what every(!) VPN gateway on the market supports. Also Sophos does this.

KarstenI · ‎02-18-2023

It’s not PPT, but in the end it’s all in the documentation: https://documentation.meraki.com/MR

KarstenI · ‎02-17-2023

What, "It does not work" is not a valid failure description? I have to deal with that over and over (even from IT personal) ... 😉

KarstenI · ‎02-14-2023

You wouldn't need the firewall rules for DHCP as that is exempted from the "Deny Local LAN" processing: https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/'Deny_Local_LAN'_settings_in_Cisco_Meraki_MR_firewall

KarstenI · ‎02-14-2023

No conflict as your individual rules are always placed above the "Deny Local LAN".

KarstenI · ‎02-14-2023

I would open a support case. A client connecting to an AP definitely shouldn't take that AP down.

KarstenI · ‎02-14-2023

It works aas intended. And now I again ignore it as I nearly never use the hamburger menu ... 😉

KarstenI · ‎02-13-2023

Certainly not always best. But works for me very well most of the times.

KarstenI · ‎02-12-2023

Welcome back! 😁 Sadly I didn’t make it to CiscoLiveEMEA (and also not to WLPC at the same time). The only new device I am aware of is the MG51. Pretty much a faster MG41.

KarstenI · ‎02-12-2023

hmmmmmmm, Darren, is it you?

KarstenI · ‎02-11-2023

The Early Access API has access to the health-scores: https://developer.cisco.com/meraki/api-v1/#!get-network-wireless-client-health-scores

KarstenI · ‎02-10-2023

I don't think there is a hard Best Practice, It has to match your needs. I am a friend of DHCP with reservations for my devices. This speeds up the onboarding if they are moved to different locations. But on some situations I set them statically. For example if I need to send traffic from the device to a RADIUS server for 802.1X.

KarstenI · ‎02-10-2023

With this little traffic it is quite certain that having "only" 10G is not the problem. Moving to 20G with a LAG will improve reliability but will not solve the problem. Now you have to look for other differences between these two places. For example AP config/models/problems/channels etc.

KarstenI · ‎02-10-2023

You need to look at the individual ports that connect your switches: If you see a traffic rate that approaches the line rate it's time to add some links to the LAG or move to a faster interface. The pure amount of traffic is not really relevant as it doesn't tell if it is bursty.

KarstenI · ‎02-09-2023

Yes, this was strange as this would also be my lab/office environment. I still completed the form …

KarstenI

Karsten Iwen

Community Record

Badges

Re: Access Point Traffic Encryption