Great, another conversion. Welcome Merle! Thank god this isn't a webcam medium, good on you! ... View more

Hi Carlos. Welcome to the community. I'm also behind a Meraki stack! ... View more

Thank you for your kind words. I fully agree. Welcome to the community. ... View more

Welcome to the club Sampat. I hope to see you around. ... View more

Welcome Shaikh! ... View more

Welcome sir! ... View more

I fear this is not possible at the moment. This article describes how the firewall is supposed to work and if I understand it correctly it can't block a flow that is initiated from the third party: https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior   In my opinion this is a shortcoming of the product. While I understand the philosophy to block flows as close to the source as possible this may not always be possible as that third party device may be one you don't have under control/don't trust. Perhaps someone from the MX team can elaborate a bit on the philosophy. ... View more

How does your SIEM get its information? Are you using NAT mode on the access points (I'm asking because the IP address you gave is in the 10.0.0.0/8 range)? ... View more

There is no hard limit to the number of tunnels it will build. The numbers are based on lab testing and are recommendations. Actual performance will vary per situation.   In a similar way there is a recommendation for no more than 500 clients behind an MX100. /21 could have 2000+ clients so it might suffer, yes. It might also just work, it all depends on what they're doing.   Note that It will display a warning if you use the DHCP server functionality and a subnet larger than /19 and it will do so each time you "Save settings": Confirming that means that you'll effectively use the larger subnet, but the DHCP server will probably only hand out addresses from a smaller /19 pool. No issues with that apart from the fact that you'll likely have a large part of your subnet unused. ... View more

Good question. Closest you can get atm is this call: https://developer.cisco.com/meraki/api-v1/#!get-organization-appliance-uplink-statuses ... View more

I'm not sure I understand the question. But in the case of two uplinks the MX should build tunnels over both uplinks automatically (unless NAT traversal doesn't work and you're using manual NAT forwarding).   If you're talking about a situation where there's a provider router in front of your MX and it's a NATed setup, it's up to that device to NAT the correct address.   This whitepaper goes quite deep into how the AutoVPN works: https://meraki.cisco.com/wp-content/uploads/2020/05/meraki_whitepaper_autovpn.pdf   This article also mentions the fact that tunnels are built over both uplinks: https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Failover_Behavior ... View more

I can't test it for you but it seems like the good way to solve the challenge. Basically the local IP is just part of the range that is accessible through the site-to-site VPN so I see it as expected behavior. ... View more

Congratulations to our challenge winners (randomly selected from those who had all of the below correct answers): @RSG and @NathanG!    The central theme was Hitchhiker's Guide to the Galaxy created by Douglas Adams originally as a radio story broadcast on BBC Radio 4. Later it was released as a book trilogy and it was also turned into a movie. More info here: https://en.wikipedia.org/wiki/The_Hitchhiker%27s_Guide_to_the_Galaxy   So here are the answers to the questions and the hints you could find:   We are looking for a radio station. Switch Eddie's geographic location (address). All right, for this one, I admit my question was a bit unclear. What I was looking for was the name of a radio station. The address you could find in the dashboard for switch Eddie was "Broadcasting House, Peel Wing, Portland Pl, London W1A 1AA, United Kingdom", which is BBC's headquarters. Anyone who answered something containing BBC or the address gets a point for this one. We are looking for a date. Have a look at VLAN 1525 in the MX. It'll provide hints. The name of VLAN 1525 is "Towel day" which is a yearly tribute to Douglas Adams. It takes place on May 25th and was first celebrated in 2001. So 25/5/2001, the VLAN number actually also refers to it as it is the same in reverse 01/5/25. https://en.wikipedia.org/wiki/Towel_Day Anyone who had May 25th gets a point. We're looking for a well known attack used by hackers. A hint can be found in the raspberrypi client's notes. The notes for the raspberrypi client said "So long, and thanks for all the phishing" a reference to the line said by the dolphins when they left earth "So long, and thanks for all the fish," and also the title of one of the three books. It was also used as the opening for the movie: https://www.youtube.com/watch?v=N_dUmDBfp6k. We were of course looking for phishing: https://en.wikipedia.org/wiki/Phishing. Anyone who had phishing in their answer (by some misspelled as phising which I'll also allow) gets a point. We're looking for a motto, and even a rule. Don't ... SSID 15's name says the rest. SSID 15 is its number in the dashboard GUI but it carries number 14 in the API because there the numbering starts at 0. This was picked up by several of you but I can assure you, it was not a mistake. In any case, we were looking for the message that is on the cover of the Hitchhiker's Guide to the Galaxy "Don't Panic". Even Elon Musk picked up on this when he launched his roadster into space: Anyone who had "panic" in their answer gets a point. This question can be found on the splash page settings for the same SSID. This one seems to have been tricky for a lot too because a lot of you answered the question... with a question. The question could be found in the splash settings of the same SSID. What you found there was the following url: http://What.is.the.answer.to.the.ultimate.question.of.life.the.universe.and.everything. The answer we were looking for was of course 42, which you could learn through a simple google search:   Anyone who had 42 in their answer gets a point. We're looking for one of my favorite characters. The Total Perspective Vortex MV camera's tags are all hints. The tags of the camera were: "alan_rickman_and_warwick_davis", "ambition_makes_you_look_pretty_ugly" and "looney_tunes_martian". The character we were looking for was Marvin, the Paranoid Android. - Warwick Davis and Alan Rickman were both responsible for the depiction of Marvin in the movie, Alan for the voice, and Warwick for the physical acting. Coincidentially they also both play a role in Harry Potter, but that was not what we were looking for. - "Ambition makes you look pretty ugly" is a line from the Radiohead song "Paranoid Android". - And the martian from Looney Tunes is also called Marvin. Anyone who had Marvin in their answer gets a point. We're looking for some kind of big calculator. Port 6 on switch Eddie links up to it. Port 6's name is Deep Though Uplink. So we were looking for Deep Thought, the supercomputer that was designed to calculate the Answer to the Ultimate Question of Life, the Universe, and everything. IBM named their chess computer after it btw. Anyone who had Deep Thought in their answer gets a point. We're looking for the artist of a song. You'll need to use the snapshot API to know which one. Make a snapshot of the Total Perspective Vortex camera. I shone some light at the exact timestamp of 18/08/2020 16:12:00 Belgian time (Note that Belgian time is at +02:00 at the moment). If your timestamp is correct, you'll see the title of a song that's also the name of a spaceship, if not you'll see only darkness. The image you got when you got the correct timestamp was the following: If you studied it carefully you could find a music sheet of the song "Heart of Gold" which is also the name of one of the spaceships in the Hitchhiker's Guide to the Galaxy. As an extra you could also find a line for the lyrics on the post-it note at the bottom. To avoid any confusion I even put N. Young under the line. The artist we were looking for was of course Neil Young. Anyone who had Neil Young in their answer gets a point. Who is informed when someone violates their geofencing policy? The people who are e-mailed are configured in the "geofencingOut" alert type. The person configured there was arthur.dent@human.from.earth Arthur Dent is the protagonist in the Hitchhiker's Guide to the Galaxy. Note that zaphod.beeblebrox@from.betelgeuse.five was put in there to trick people. He is informed if people are using too much data on the network. Simon Jones as Arthur Dent with Marvin in the background Martin Freeman as Arthur Dent with Marvin in the background Anyone who had Arthur Dent or arthur.dent@human.from.earth in their answer gets a point. By now the central theme of the questions should be clear. But the next question isn’t: oaniemmsbuhpvzkbzptgsilyzskjoticnmk? It's Vigenère encoded, the keyword for deciphering it can be found in a pointless MX L3 firewall rule. There were only two rules in the MX firewall. Both allowed all traffic, which makes both rules kind of pointless. One can be forgiven as it's its role as default rule, the other, being utterly redundant, cannot. In that second rule the description said BABELFISH (a type of fish one puts in their ear to have it perform live translation of any language, and in itself of course named after the Tower of Babel). Using that keyword and a Vigenère decoder such as for example this one you could find the question: https://www.dcode.fr/vigenere-cipher  So the question was "nametheauthorofthisgreatradioseries". By now it should have been clear that the central theme was indeed Hitchhiker's Guide to the Galaxy and the answer was therefore of course Douglas Adams, who created both the radio show and the books. Anyone who had Douglas Adams in their answer gets a point.   Thanks for playing all, I hope you all enjoyed thoroughly, in every case you should've all received a badge.   Special thanks to @SteveWeidner for all the imagery in his answer, @CN for the links (especially the special one...), @RomanMD and @ccie32305 for all the code, @pgandhi for leading me to Johnny Cash's cover of Heart of Gold, everyone who kudo'd the post or put kind words in their answers and everyone who thought I was the author of the radio series 😎.   For these people I also want to award an extra badge that fellow community member @cody_roche made. Unfortunately Meraki themselves can't actually use it for copyright reasons, but I'm giving it anyway, print it, frame it, and put it above your beds. Great job Cody. I love it. Even though Douglas Adams himself hates the cosmic cutie (the green fellow) 😆.     And another thing... who will create the next community challenge? ... View more

To all of us!   Thanks Meredith and Caroline, for keeping putting up with us ... for 3 years. ... View more

Hi Pete, you must've missed it:   Source: https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page   That page is also linked to from this page: https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page   From a networking standpoint it's kind of logical. If there is no DHCP server available you need to set your own IP address. And to be able to reach the switch it needs to be in the same range.   Good that it worked out in the end!   ... View more

Congratz all! "No bunnies were harmed in the making of this unexpected win". Cheerzzz! ... View more

Congratulations to the both of you! Well deserved. ... View more

Oh Switzerland, lovely country!   Welcome to the community. Meraki dashboard = more time = more skiing.   Good luck with CMSS (once it's there). ... View more

I'm not sure what the behavior is before the cloud connection is established, but I would assume it's the same as the default cloud settings, and those are to allow ping by default: https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Denying_Inbound_ICMP_on_the_MX ... View more

Have you reached out to the provider? Maybe something is wrong with the subscription or maybe you're over some kind of data limit? ... View more

All right, just cast it to string and you should be fine: f.write(str(curr_clients[k]['ip'])) ... View more

Yeah. Just replace this: f.write(",")   With this at the bottom: f.write(",") f.write(curr_clients[k]['ip']) f.write("\n") Let me know if that doesn't work.  ... View more

I think you may be misinterpreting the x and y values... They are offsets in m, relative to the lower left corner of the specified floorplan, not relative to the AP. I assume you have seen these docs: https://developer.cisco.com/meraki/scanning-api/#!api-version-3-beta/example-payloads ... View more