- About BrechtSchamp
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
BrechtSchamp
Building a reputation
Member since Oct 2, 2017
7 hours ago
Kudos given to
Community Record
89
Posts
68
Kudos
4
Solutions
Badges
Sunday
1 Kudo
Sure, but knowing kids they will find their way around it. You're starting a cat 'n mouse game. But this should do the trick. Create a group policy (Network Wide/Group Policies) with some L7 firewall rules and apply it to the chromebox (through the clients page). After creating and applying it, disconnect and reconnect the chromebox (or your iMac when testing) to the network. Because the policy is only applied to the chromebox, their own iPhones and XBOX's should still have access whenever your existing control system allows them to. I added ttvnw.net just in case. That seems to be the domain name from which the streams themselves originate. More background info here: https://documentation.meraki.com/MR/Group_Policies_and_Blacklisting/Creating_and_Applying_Group_Policies
... View more
a week ago
I can't find any docs about that value being available via API. Make a wish! Maybe this helps though, you might be able to reuse some of this code: https://github.com/meraki/spark-operations-bot/blob/master/meraki_dashboard_link_parser.py Seems like the following python function with settingval set to ng_id will get you the value. def meraki_www_get_settings(strcontent, settingval, settingfull):
'''
In the dashboard, there are a large number of settings hidden in the code. This function will parse and retrieve
the value of a specific setting
:param strcontent: String. Raw HTML of the page.
:param settingval: String. If the setting is in the "Mkiconf.setting = " format, pass "setting" here. Otherwise...
:param settingfull: String. If the setting is named or punctuated differently, pass the exact string here.
:return: String. The value of the requested setting
'''
... View more
a week ago
1 Kudo
I assume you already tried restarting your computer. Have you tried this: Use the netstat command to find the program that uses port 1723. Then, end the process for that program. To do this, follow these steps: Click Start, click Run, type cmd.exe in the Open box, and then click OK. At the command prompt, type the following command, and then press ENTER: netstat -aon In the output that is displayed, identify the process ID for the program, if any, that uses TCP port 1723. At the command prompt, type the following command, and then press ENTER: taskkill /PID PID /F Note The taskkill command ends the process that corresponds to the process ID number. The /F option is used to forcefully end the process. At the command prompt, type exit , and then press ENTER to quit the command prompt. That might tell you which program/service is causing issues. source: https://support.microsoft.com/en-us/help/885959/error-633-the-modem-or-other-connecting-device-is-already-in-use-error
... View more
a week ago
1 Kudo
I'm not a web designer but checkboxes usually have a standard size tied to the resolution, if it's too small it's more an issue with the used browser than something else. That being said, yes you can change the size of it. You can create a copy of the standard "modern" and add some custom CSS to make it bigger: First create the custom theme: Then edit its CSS, the checkbox's id is gdpr_checkbox:
... View more
a week ago
1 Kudo
Found some info here: https://discussions.apple.com/thread/3963202 Blocking TCP 5223 and the following IP ranges: 17.173.0.0/16 17.178.0.0/16 17.133.0.0/16 Again with the caveat that this will likely take down multiple Apple services as the port is used for the Apple Push Notification Service and the ranges are big. Also found a blog of someone who studied the Facetime protocol in detail in 2010: http://www.packetstan.com/search?q=facetime Might have changed since then... I also found some info on the Aruba website that they at least can identify the conversations to optimise QoS (not with the intention to block anything).
... View more
a week ago
@jdsilva wrote: What is that value? What do you need it for? Maybe for this: https://create.meraki.io/build/wayfinding-mapwize/ It's mentioned there.
... View more
a week ago
1 Kudo
So I assume you blocked youtube with the L7 firewall rule in the MX firewall? Something like this: L7 Firewall Block And then in the new group policy you created you selected custom firewall rules: Allow Youtube Group Policy And then you applied the policy to the clients like this: Apply group policy to client Correct? I tested it and it works for me. It only blocks the actual video stream though, the website itself loads fine. During testing I gave it some time to sync the MX configuration and restarted my browser. Sometimes it took a little while to actually start doing what I configured it to do.
... View more
2 weeks ago
2 Kudos
I'd try to stear clear from using the device type for policies as they are known to be inaccurate at times: https://community.meraki.com/t5/Network-Wide/In-accurate-Device-type-reported-by-Meraki/td-p/380 You can't hide SSIDs for specific users/devices it's all or nothing. You'll be better of using other access control methods like 802.1X (WPA2-Enterprise), authentication through a captive portal, manual via the client details page, Cisco ISE, ... Which one is the best choice depends on your use case.
... View more
2 weeks ago
@PhilipDAth wrote: If you mean two MX's, rather then two networks, and you mean warm spare mode - then the two MXs share the same IP address. https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair And you only need one MX license, saves you some money.
... View more
2 weeks ago
Is it possible you have a problem with step 6 or 7: Logic Flow Client connects to AP AP redirects client to splash server Splash page displays content and includes additional parameters in the URL Client interacts with the site (form, oAuth, SMS, etc.) Form submission sends user name and password to Meraki in post body Meraki sends the user credentials to the configured RADIUS or Meraki Authentication server in post body Meraki grants the login and redirects the client to the success_url The success_url is a route on the splash server that will store the logout_url paramater The client is logged in and will see a final splash page which optionally present a logout button using the supplied logout_url parameter The user can optionally press a logout button using the logout_url to end their session. If a continue_url is provided in the query, it will send the client to this page. Are you using Meraki or RADIUS auth? Do you have any logs in either?
... View more
2 weeks ago
5 Kudos
Here's a checklist: Make more time for the Meraki community. Do something Meraki API related in combination with Google assistant. Try to win an MV somehow. Finally find time to go snowboarding again. See all three Matrix movies again.
... View more
2 weeks ago
Same question here for Cisco: https://community.cisco.com/t5/network-management/fqdn-hostname-for-syslog/td-p/3345599 There it's actually worse imo, you can enter a FQDN but it gets saved as IP. You only have to configure it once per network, not per device. So from that point of view I guess if it changes it's less of a problem than for traditional network equipment. If you have lot's of networks you can script it: https://dashboard.meraki.com/api_docs#update-the-syslog-servers-for-a-network Like @PhilipDAth said, I'm not sure that I'd want the "complex things" that DNS can do increase the risk of losing all my logs due to an issue with them. But you should indeed be given a choice.
... View more
2 weeks ago
It's working! If I may add a little remark though. I was wondering if there is a way to open images in a separate tab (without going through the source code with Chrome). In this post for example there's a really big picture: https://community.meraki.com/t5/Wireless-LAN/Meraki-and-Purple/td-p/34603/jump-to/first-unread-message To be able to read everything, even with the lightbox working, you're have to download the image. If you were able to open the image in a new tab, the browser would allow to easily scroll around on the picture. Maybe that's what the maximize button is supposed to do, but then it doesn't work for me.
... View more
2 weeks ago
The included mount will be similar to the MV12 one. See this video for an idea: https://www.youtube.com/watch?v=AM7PFeTyNuM Not sure if you can buy a spare.
... View more
2 weeks ago
Might want to provide a link to the guide you followed. From the Meraki point of view, this is the guide to look at to configure EXCAP (External Captive Portal): https://documentation.meraki.com/MX/Access_Control_and_Splash_Page/Configuring_a_Custom-Hosted_Splash_Page_to_work_with_the_Meraki_Cloud From your screenshot I'm wondering whether you performed this step: Enabling a Custom-Hosted Splash page on the Meraki Cloud Navigate to Configure > Splash page Select the SSID you want to configure from the SSID drop-down. Under Custom splash URL select the radio button Or provide a URL where users will be redirected: Type the URL of your custom splash page: Click Save Changes. Purple will need to be compatible for this to work properly! Rakesh, here's the OP's screenshot more readable: Link
... View more
2 weeks ago
Nice and clean! Wild guess: 4 x MS120-48LP and an MX84? Are you using Meraki APs too?
... View more
2 weeks ago
1 Kudo
I found the following: Note: If a device is whitelisted in a network that is bound to a template, that client will be whitelisted on all other networks bound to that template. Conversely, if the client is removed from the whitelist on one bound network, it will also be removed from the whitelist on all others. Source: https://documentation.meraki.com/MR/Group_Policies_and_Blacklisting/Blocking_and_Whitelisting_Clients Based on that it should be standard behavior if all your networks are making use of the same template.
... View more
2 weeks ago
10.128.128.128 is the IP address of the AP. The AP can handle DNS resolving for the guests. Previous posts should help troubleshooting if you're experiencing issues with that if it's not working. However, if you want you can still configure a custom DNS server too: https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/Configuring_Custom_DNS_for_an_SSID_in_NAT_Mode Edit: My reply was meant for your previous post.
... View more
2 weeks ago
1 Kudo
I think you'll need to use create your own portal leveraging the Captive Portal for that. There's a parameter called continue_url. That's what you need. More info here: https://create.meraki.io/guides/captive-portal-api/
... View more
2 weeks ago
You'll have to configure it in Twilio. It's a general setting for all SMS's sent by your account. It's not supported on the free trial though. More info here: https://support.twilio.com/hc/en-us/articles/223181348-Getting-Started-with-Alphanumeric-Sender-ID-for-Twilio-Programmable-SMS
... View more
2 weeks ago
1 Kudo
Meraki.io is the source for all API stuff. Adding to the info given by @jdsilva and @NolanHerring this is probably a good start too: https://create.meraki.io/build/meraki-postman-collection-getting-started/
... View more
2 weeks ago
Also, a quick ipconfig /all on a windows client can show you the DNS settings it's using.
... View more
Kudos given to
Latest Tags
No tags yet
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 53 | yesterday | |
| 62 | Thursday | |
| 122 | a week ago | |
| 195 | a month ago |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 5 | 1514 | |
| 5 | 1999 | |
| 3 | 282 | |
| 3 | 353 | |
| 3 | 304 |
