Meraki

Adam · ‎Feb 14 2018

If you want to be able to get to its local status page remotely then you need to go to Security Appliance>Firewall and add your IP to the 'Web (local status & configuration)' section. Also go to Network Wide>General and check the 'Remote device status pages' setting and make sure it is set to 'Remote devices status pages enabled.'

Adam · ‎Feb 13 2018

If the traffic is NAT'd to your SMTP server couldn't you do the monitoring on that server? Alternatively you could mirror the port going to/from your mail server to whatever monitoring platform you wanted to use.

Adam · ‎Feb 13 2018

By AD Authentication do you mean 802.1x Radius? If so then it does look like you could have that selected for Network Access section and the spash 'Click-Through' is served by the Meraki servers so no certificate needed.

Adam · ‎Feb 13 2018

You can't 1:1 NAT anything that needs connectivity to the provider address space?

Adam · ‎Feb 9 2018

In my experience the throughput has always just been the down speed. No indication of upload speed. But I stopped using that test in lieu of running http://www.speedtest.net/ from a client machine since I typically need to know the circuits upload capabilities as well. Also if you have two WAN connections that tool doesn't give you the ability to select which one you want to test the throughput on. So it'll likely just use whichever you have specified as the primary uplink. The last section in the article @PhilipDAth linked above provides some interesting clarification. https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Throughput_test_to_the_Web_from_Cisco_Meraki_devices#Comparing_to_Similar_Throughput_Tests

Adam · ‎Feb 9 2018

I've learned a lot in this thread. Mass kudos.

Adam · ‎Feb 9 2018

Usually multimode cables are orange. But that would be something good to confirm or compare with the old configuration. I learned this the hard way when I spent an hour troubleshooting fiber one day only to realize I was using a single mode cable instead of multimode. Once I switched to the multimode cable I was fine. But that entirely depends on if the upstream fiber is single or multi etc. Also looks like your SFP is single mode. Was that SFP and cable working on the old setup or is this a new setup?

Adam · ‎Feb 9 2018

The SFP should be a constant. No configurations needed aside from your port config which you did as trunk. Your jumper is yellow so usually that is an indication that it is single mode not multi mode. But its most important that the fiber cable (jumper) matches the rest of the fiber run to its destination. Whether that be single mode or multi mode. Did the fiber work before on the old Cisco switch or is this a new configuration you are working on?

Adam · ‎Feb 9 2018

I agree with @Markus comment. The NPS config on each server will be important to review. There are a lot of moving parts to make sure NPS is configured properly on both the server and also on the clients (GPO). Shared secret, Policy Conditions/Constraints, etc...

Adam · ‎Feb 9 2018

If I run that same test from the Meraki dashboard it fails but my radius is working fine with NPS. I think I called Meraki about that a long time ago but I can't remember what they said about the reliability of that test. So you may want to try connecting an actual client to your SSID to test.

Adam · ‎Feb 9 2018

In my experience it was usually an issue with me not understanding the fiber and getting the wrong jumper. Single mode vs multi mode etc or having the pair flipped on one side or the other.

Adam · ‎Feb 7 2018

I see you marked the thread as solved. Were you able to find a solution or just moving on to support?

Adam · ‎Feb 7 2018

Well I just downloaded a CSR from my dashboard and it appears to look the same as yours. So your next step may be support to make sure there isn't an issue with the CSR export.

Adam · ‎Feb 7 2018

Error would seem to indicate an issue with the CSR. Are you the copy of the CSR you downloaded from the Meraki dashboard isn't corrupt? Maybe after you've downloaded the CSR try opening it in notepad. The content of the file should look something like this with different hash information in the middle. -----BEGIN CERTIFICATE REQUEST----- MIIByjCCATMCAQAwgYkxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlh MRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpHb29nbGUgSW5jMR8w HQYDVQQLExZJbmZvcm1hdGlvbiBUZWNobm9sb2d5MRcwFQYDVQQDEw53d3cuZ29v Z2xlLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEApZtYJCHJ4VpVXHfV IlstQTlO4qC03hjX+ZkPyvdYd1Q4+qbAeTwXmCUKYHThVRd5aXSqlPzyIBwieMZr WFlRQddZ1IzXAlVRDWwAo60KecqeAXnnUK+5fXoTI/UgWshre8tJ+x/TMHaQKR/J cIWPhqaQhsJuzZbvAdGA80BLxdMCAwEAAaAAMA0GCSqGSIb3DQEBBQUAA4GBAIhl 4PvFq+e7ipARgI5ZM+GZx6mpCz44DTo0JkwfRDf+BtrsaC0q68eTf2XhYOsq4fkH Q0uA0aVog3f5iJxCa3Hp5gxbJQ6zV6kJ0TEsuaaOhEko9sdpCoPOnRBm2i/XRD2D 6iNh8f8z0ShGsFqjDgFHyF3o+lUyj+UC6H1QW7bn -----END CERTIFICATE REQUEST-----

Adam · ‎Feb 7 2018

Glad you were able to get it resolved 🙂

Adam · ‎Feb 6 2018

That article isn't bad. Basically I did the following when I went through this. 1. Plugin the MX to an internet connection so it can check-in and be managed 2. Add it to the same network as the existing MX84 that you are going to replace. It'll add as a spare and get the same config as the current MX84 3. Configure the new MX84 with any WAN interface static IPs. Those won't migrate over automatically. Anything you configure on the MX local config page won't migrate over automatically. 4. Rack the MX84 directly above below your current MX84 if possible 5. Once ready move cables port by port from the old MX84 to the new one (this will result in interruption but it should be minimal < 60 seconds).

Adam · ‎Feb 6 2018

It may be that your account doesn't have full administrator permissions. You should have an 'Organization' option on the left like this. To clarify, I believe your account needs 'Organization' permissions to be able to delete Administrators. Otherwise you were just likely setup as an Admin of your network which won't give you Organizational powers like add/remove admins.

Adam · ‎Feb 6 2018

Try going to Organization>Administrators to remove them. Looks like you may have been in Network Wide>Users

Adam · ‎Jan 30 2018

I have the CMNO. How do I add the badge to my profile?

Adam · ‎Dec 28 2017

Only somewhat inexpensive option I can think of then would be to get a small Meraki switch so you can go back to MAC authentication. Otherwise 802.1x is the only other feasible option but far more complex.

Adam · ‎Dec 27 2017

Couldn't you just disable the unused ports?

Adam · ‎Dec 22 2017

Confirmed through testing, thanks for the feedback everyone.

Adam · ‎Dec 21 2017

Actually the opposite. I know it disables the port traffic but I wanted to make sure it also disabled POE for power savings. My use case is that I want my APs to be fully powered off at a given site for a window during the night. The port schedule didn't really clarify if it just disabled the port or also disabled the POE.

Adam · ‎Dec 20 2017

Meraki or Network

Adam · ‎Dec 20 2017

Do the port schedules just disable the port or do they also disable POE?

About Adam

Adam

Community Record

Badges