Meraki

KarstenI · ‎Sep 14 2023

Yes, I disabled the sampling, and now the clients show up correctly. I didn't remember this feature ... Now I have to find out why on some networks it is enabled and on some it is disabled.

KarstenI · ‎Sep 13 2023

Hi all, I know this is an old thing and was discussed multiple times. But I don't get the actual state ... Can someone direct me? I have multiple networks where clients are shown like this in the dashboard: But no, they are not connected with a LAG to the core; the LAG goes to another Meraki stack. What causes this and what was the solution, if any? Have a great day, Karsten

KarstenI · ‎Sep 11 2023

I am not sure when it started, but my M2 is just now connected to an OWE SSID:

KarstenI · ‎Sep 10 2023

The screenshot is for the SD-WAN traffic. Internet traffic is controlled at the top of the page under “flow preferences”. They work based on IP addresses and not FQDNs.

KarstenI · ‎Sep 9 2023

My personal experience is only with ISE. But a couple of customers run ClearPass, and when I see them (or the partner specialist that sold them the ClearPass) configure that device, I know how easy the ISE is. And no, the ISE is not easy, but you can get used to it quickly with some experience. When looking at Clearpass, it seems like a whole unintuitive mess.

KarstenI · ‎Sep 7 2023

I can only think about a Linux box that receives the flows, filters out everything you don't want, and forwards the rest to the SIEM.

KarstenI · ‎Sep 6 2023

Yes, I often had this summarized route in the past. But new setups are all configured with individual routes just because of this message.

KarstenI · ‎Sep 6 2023

What do you mean with experience? The warning? Yes, and it is so annoying. It is the same warning that you get when you have the SVIs on the internal switch and have a summarized route to that switch.

KarstenI · ‎Sep 6 2023

You can point a summary route to a random internal IP and advertise this route as a summary. The drawback is that for every change, the dashboard will print a dumb warning that traffic will be routed to the most specific route.

KarstenI · ‎Aug 31 2023

Nothing needed here. The LAG will only form if the other side is also ready.

KarstenI · ‎Aug 31 2023

With VPCs, the Nexus pair behaves as one switch in the perspective of aggregate links. On the MS you can just build an aggregate, and you are fine.

KarstenI · ‎Aug 30 2023

In September there will be the Introduction Webinar to Distributors and Partners. I think this will make licensing much easier.

KarstenI · ‎Aug 30 2023

Perhaps the relevant information is that you lose around 87 dB at a distance of 100 meters.

KarstenI · ‎Aug 30 2023

The EOS list does not contain products that are not EOS/EOL. What do you miss? The licenses are typically listed in the datasheets.

KarstenI · ‎Aug 29 2023

This will depend on many factors like the following: regulatory domain channel transmit power (which is dependent on 1 and 2) client device the required signal on the receiver

KarstenI · ‎Aug 28 2023

As @ww correctly mentioned, not natively. But if you have the strict business requirement to do this, you could achieve this with the Cisco ISE. But if you have a RADIUS server like the ISE, implementing 802.1X is always the better option.

KarstenI · ‎Aug 28 2023

BTW: If I and the others sounded rude with our statements, this was probably not the intention. It is more of a hint to come here *early* and ask for help if in doubt about anything. If you came here *before* this, many people in this community had directly shouted, "Attention! You have to act quickly" to ensure nothing will happen.

KarstenI · ‎Aug 28 2023

I would also ask the company that consulted you with the decision to buy Meraki as this behaviour is clearly documented. They really should have told you this.

KarstenI · ‎Aug 28 2023

I think it is quite clear. But with something so important, you better have asked about the consequences. But anyhow, now you know how to handle this in the future.

KarstenI · ‎Aug 28 2023

Primarily, you should be upset with your e-mail handling where you ignore the most critical mails where it is clearly stated what will happen.

KarstenI · ‎Aug 25 2023

The best way is to enable single sign on for the WLAN. If you are on a new Windows release you perhaps have to disable Credential Guard for this to work. Using client Certificates would be the better option. And all these options are ideally pushed with GPOs.

KarstenI · ‎Aug 25 2023

I would keep the ISE and do 802.1X with it instead of using NPS, as the NPS is a PITA. Meraki Cloud Authentication, I think it is strong for BYOD, but today I try not to use it for corporate users. Important is that you do Enterprise authentication for corporate access instead of Personal (with a Passphrase).

KarstenI · ‎Aug 22 2023

You meed a router in front of the MX for this to work. A pure L2-switch is not enough, although a Layer3 switch would be fine. The WAN interface of the router gets the /32, the LAN interface is configured with an IP from the /28. Be aware that this again introduces a Single point of failure.

KarstenI · ‎Aug 20 2023

The flow preferences are used to select WAN1 and WAN2 for outbound traffic, They are not used to somehow select the IP range. That is purely the NAT config. But If you have a NAT config for WAN1, then you typically want to make sure that outbound traffic is also going to WAN1.

KarstenI · ‎Aug 20 2023

You can use these addresses in your NAT config. There is no need to assign them to the interface.

About KarstenI

KarstenI

Karsten Iwen

Community Record

Badges