Meraki

BrechtSchamp · ‎Mar 8 2019

There's nothing wrong with your math. But the max expected power usage of the AP is 18W as per the datasheet. That's also why the dashboard shows that 480W of the available 370W has been budgetted (reserved). As long as the actual usage doesn't exceed the 370W you'll likely be fine. I don't think it's related to this problem though. If it were, the behavior would be different. It would just turn of APs starting from those connected to the highest port number until it is within budget. Note: If the PoE budget is exceeded, PoE power will be disbursed based on port count. In the event the budget is exceeded, PoE priority favors lower port numbers first.(e.g. with all 24 ports in use on an MS22P, if the budget is exceeded and a device requests 6W of power on port1, PoE on port 24 will be disabled.

BrechtSchamp · ‎Mar 8 2019

Indeed, @Ben is probably on to something. See this post with someone seemingly experiencing the same issue as you: https://community.spiceworks.com/topic/453087-meraki-switches-randomly-dropping-poe-budget-to-0?page=1 This was @merakisimon 's response back then. This dates back to december '16 though. What's the software version on your switch? Also I noticed that you are over the PoE budget on your switch. Strictly speaking your MR34's use 18W max. That means a max of 20 APs per switch on a 370W switch. It seems like you have 26 connected.

BrechtSchamp · ‎Mar 8 2019

Did it only disable the ports connected to APs or all of the ports? What are the port configurations of the failing ports? Access/trunk? (R)STP on/off? Any STP guard functionality enabled? Have you tested just cycling one of the failing ports instead of rebooting the whole switch? What's your PoE budget like?

BrechtSchamp · ‎Mar 7 2019

All right, here goes. I don't think I have done this the past either. A bit about yourself & your work I work as a Solutions Architect Network Integration at Dimension Data, a Cisco partner. So basically I'm a presales engineer for Cisco networking (not only Meraki). That means my job doesn't really involve hands-on with the hardware. That's why I'm here, I do it as a hobby and to learn about Meraki. Like for @jdsilva that also means that my posts here reflect my personal experience and don't say anything about the company I work for. In the rest of my free time I like to tinker with electronics, work on my motorbike, watch movies, game and go out for drinks. Your experience with Cisco Meraki I have been working with Meraki for a little more than 2 years now and I live it. A fun fact about yourself I once called a switch vendor's support as kid because I had a problem with the network at home. It turned out to be both ends of a cable being connected to that switch... The shame! Never knew then I'd end up working in networking.

BrechtSchamp · ‎Mar 7 2019

All right. I just wanted to make sure. Unfortunately I have no personal experience with configuring AD so I can't help you further. Maybe one of the other members will be able to help.

BrechtSchamp · ‎Mar 7 2019

I'm not sure that I understood the question fully but I think this info may help. Meraki uses a concept of "safe configuration". If a configuration change you make causes a device to lose connectivity to the cloud. It will revert to the safe configuration (not sure how long it will wait before it does that on the MX). Once the cloud connectivity remains online for 30 minutes and the device hasn't rebooted in that 30 minutes, the configuration is marked safe again. More info here: https://documentation.meraki.com/zGeneral_Administration/Cross-Platform_Content/Behavior_during_Connection_Loss_to_Cisco_Meraki_Cloud

BrechtSchamp · ‎Mar 7 2019

Thanks for the reply @EliseK . I see, maybe the message could be a little more explanatory, this feels a bit error-like :

BrechtSchamp · ‎Mar 7 2019

Yes, it's explained here: https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/SSID_Tunneling_and_Layer_3_Roaming_-_VPN_Concentration_Configuration_Guide#SSID_Configuration Basically you need to setup your guest SSID to be tunneled back to an MX which will be in your central location (where your controller currently is).

BrechtSchamp · ‎Mar 7 2019

@rward2801 Only Asia-Pacific Sessions seems to be available atm, maybe they're updating the pages.

BrechtSchamp · ‎Mar 7 2019

I assume you saw this from your link: ldap_start_tls: Server is Unavailable Error Description - The MX uses TLS to secure the LDAP connection to the domain controller. This error indicates the MX received an Error initializing TLS response from the domain controller when attempting to establish TLS. Error Solution: To resolve issues with TLS, please verify the following: The domain controller has a valid certificate installed. The domain controller supports STARTTLS. Since the MX does not support LDAP over SSL, it uses STARTTLS instead.

BrechtSchamp · ‎Mar 5 2019

That's a nice backpack @CarolineS and @MeredithW Muchas gracias!

BrechtSchamp · ‎Mar 5 2019

It has arrived today. That was fast! Thanks again!

BrechtSchamp · ‎Mar 5 2019

New certification. Sign me up! I guess that means I need to adapt my new years resolutions

BrechtSchamp · ‎Mar 4 2019

Meraki can do it, but you need an MX is what @BrandonS is saying 🙂

BrechtSchamp · ‎Mar 4 2019

@MerakiDave wrote: I believe you do get a certificate and yes, you can certainly list CMNO in your email signature just like any other industry cert, and I believe you also get a unique CMNO ID # when you complete the certification. Good luck! Correct. CMNO has an id, CMNA doesn't. Both give you a certificate. In the email with your certificate there will also be a png to put in your signature.

BrechtSchamp · ‎Mar 4 2019

Good to hear. Thanks for the thanks.

BrechtSchamp · ‎Mar 4 2019

I'd start here: https://create.meraki.io/learn/ Start with the one on the top right (Intro to the Dashboard API) to get your first steps going. There's a lab exercise section in it that provides an API key to a sandbox: Lab Exercises This exercise will get you started with the Meraki Dashboard API using a free tool, Postman, to make REST API calls to the Meraki dashboard. Answer all questions using Postman and API calls, no Dashboard use please! You can access the latest API reference docs here: https://api.meraki.com/api_docs Use this API key: 093b24e85df15a3e66f1fc359f4c48493eaa1b73 Determine the Organization ID for the “Meraki Launchpad” Find out through the API when the license of this organization expires. Is SNMP enabled on this Organization? What is the value for “claimedAt” for the device with serial number “Q2EV-D92Y-TX32” What’s the name of the network that contains the device with serial number “Q2HN-7N9M-89PH” What tags are applied to device “Q2UD-7N75-UGU5”? How many VLANs are configured on device “Q2QN-5DPW-DXQT”? Then take a look at the devnet labs linked on that same meraki.io/learn page. Those will also show you how to use the Scanning API and the Captive portal API among other things. After that you're ready for pretty much anything. There are lots of other applications and tutorials on create.meraki.io and meraki.io in general. Also, register for a meraki Webinar so you get your hands on some free hardware so you can test with your own environment: https://meraki.cisco.com/webinars

BrechtSchamp · ‎Mar 4 2019

@jvelasco wrote: Hi Brecht, I have tried it but it seems it does not work 😞 Hmm well that's annoying. Good to know.

BrechtSchamp · ‎Mar 4 2019

I believe as soon as the client disconnects and reconnects to the network it will go through the DHCP process again. At that point they will receive the newly assigned static address. If they try to renew the lease I think the DHCP server will refuse and assign them the static IP address too.

BrechtSchamp · ‎Mar 3 2019

Fair enough, but Arris currently owns it, which is Aerohive. The ppsk kiosk also refers to Aerohive being their technology partner.

BrechtSchamp · ‎Mar 2 2019

Think you mean aerohive @PhilipDAth ;).

BrechtSchamp · ‎Mar 2 2019

Yes, go to the clients list (Network-Wide > Clients), find the device and click on it. The scroll down and change the policy. Set the access to your ssid to blocked. Mind you that there's a limit to the number of clients which you can block this way (3000). If the client has not yet connected to the network you can also do it on beforehand from the clients list.

BrechtSchamp · ‎Mar 1 2019

You too @NolanHerring ! @PhilipDAth was on fire. There was no stopping him :P. Gratz @jdsilva too. And thanks @MeredithW . Edit: Thanks for your kind words @jdsilva !

BrechtSchamp · ‎Mar 1 2019

Cool! Thanks for the votes all. Much appreciated.

BrechtSchamp · ‎Feb 28 2019

I have the same behavior. Feels like a bug. If you take away the contents of blockedUrlCategories it works: { "allowedUrlPatterns": [ "http://www.example.org", "http://help.com.au" ], "blockedUrlPatterns": [ "http://www.example.com", "http://www.betting.com" ], "blockedUrlCategories": [], "urlCategoryListSize": "topSites" }

About BrechtSchamp

BrechtSchamp

Community Record

Badges