Meraki

ww · ‎Aug 6 2018

remove the policy, set up a capture on the fileserver port. access the share from a vpn client. filter the capture on ur client ip and check the ports its using.

ww · ‎Aug 6 2018

https://documentation.meraki.com/MX-Z/Firewall_and_Traffic_Shaping/Firewall_Settings Note: In NAT mode, all inbound connections are denied except for ICMP traffic to the appliance, by default. If you want to allow additional inbound traffic, you will need to create a new port forwarding rule or NAT policy and explicitly allow connections based on protocols, ports, or remote IP addresses (see below). Outbound connections are allowed by default. Customers may need to add a default deny rule for compliance and increased security.

ww · ‎Aug 3 2018

so you just add the subnet. and the next hop(gw)

ww · ‎Aug 3 2018

you could use dhcp for ip and gw. you can use API to push the name and others settings

ww · ‎Aug 1 2018

i dont have one but i think it does only location analytics like a mx-w

ww · ‎Jul 31 2018

https://meraki.cisco.com/products/switches/ms425-32, on the bottom of the page. so if you use SFP should match SFP on the other side. and SFP+ should match SFP+ on the other side. SFP can also work in SFP+ slot but SFP+ can not work in SFP slot.

ww · ‎Jul 31 2018

there is a difference in same ip address and address in same subnet.

ww · ‎Jul 31 2018

https://documentation.meraki.com/MX-Z/Monitoring_and_Reporting/Client_Tracking_Options look for the notes at the end

ww · ‎Jul 31 2018

dont know. but twinax/dac no option?

ww · ‎Jul 31 2018

you can't you can create a support case and check if a meraki support engineer can.

ww · ‎Jul 31 2018

yes thats what the mx does best. https://meraki.cisco.com/blog/2018/06/all-about-autovpn/ https://meraki.cisco.com/lib/pdf/meraki_datasheet_mx.pdf for home users you could look at the Z1/3 if you want just a vpn. https://meraki.cisco.com/products/appliances/z3

ww · ‎Jul 29 2018

i think its better to use python if you want to use databases csv filtering etc.

ww · ‎Jul 27 2018

it all nat to the adres of the AP. so you need to add the ap addresses at preferences to wan2. (i guess your mtunnel will also go traverse wan2)

ww · ‎Jul 27 2018

go to wireless firewall and make a rule on your dmz ssid that blocks *ip of your appliance* and port 443 and 80

ww · ‎Jul 27 2018

you only need one setting. https://documentation.meraki.com/MR/Encryption_and_Authentication/Eduroam_Authentication_Integration_with_MR_Access_Points what they need to config on the Eduroam federation-level RADIUS is not your problem i guess.. they probably have some script to do this on the radius.

ww · ‎Jul 26 2018

try a ssid with wpa+wpa2, no band steering, lowest minimal bandwith.

ww · ‎Jul 26 2018

should work with radius if i read this https://community.meraki.com/t5/Wireless-LAN/Radius-VLAN-push-and-override-and-policy-attribution/td-p/1926 I only tested vlan override this way https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/Tagging_Client_VLANs_with_RADIUS_Attributes

ww · ‎Jul 25 2018

isn't it possible to use cliënt vpn and then allow that vpn subnet to your rdp server

ww · ‎Jul 25 2018

if guess it matches on the number only, so both udp and tcp are a match. @lpopejoy wrote: Interesting, I didn't know this. Then how can you shape the traffic for RTP streams of a SIP call? (which are normally UDP)

ww · ‎Jul 25 2018

You can't https://community.meraki.com/t5/Security-SD-WAN/Traffic-shaping-rule-TCP-or-UDP-Port/td-p/6226

ww · ‎Jul 24 2018

only 1 phone? did you reboot this phone?

ww · ‎Jul 18 2018

@NABILOU wrote: Thanks fo the answer. sorry we oreded and we haven't got them yet. So, you mean I have 2 options : 1 enabled DHCP or forwarder on vlan : with Bonjour Forwarding ? NM forward to dhcp server(if you have one) . here is some documentation https://documentation.meraki.com/MS/Layer_3_Switching/Configuring_DHCP_Services_on_the_MX_and_MS

ww · ‎Jul 18 2018

meraki is gui based. so you create a vlan, and enable dhcp service or forwarder on that vlan.

ww · ‎Jul 18 2018

You can browse the local status page and assign a static ip/vlan. But then you probably need to exclude the adres at the dhcp service. while i was reading you already got the answer 🙂

ww · ‎Jul 17 2018

go to your ap. then go to rf. there you can see cliënts for each radio

About ww

ww

Community Record

Badges