Meraki

Adam · ‎Feb 20 2018

Our buildings regularly experienced network outages with our old Sonicwall platform. The need to have redundant internet connections that could seamlessly failover and load balance became top priority. We started migrating from Sonicwalls to the MX platform and also got secondary internet connections installed. Implementation couldn't have been easier. Now we have alerts to notify us if a WAN failover occurs so we can immediately work on any down circuits and also know that the site is still operating without even a hiccup.

Adam · ‎Feb 20 2018

The event logs in the Meraki dashboard are somewhat useful but there can be gaps during device reboots and I've also noticed summarized events if an event is recurring. According to this you should be able to get to stuff > 30 days old but even Meraki suggests syslog for more detailed needs. https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Viewing_Old_Event_Logs

Adam · ‎Feb 20 2018

What type of data are you trying to get/export?

Adam · ‎Feb 20 2018

@akan33 keep us posted on what they say. I haven't observed the issue in my dashboard but I'd have a lot of networks to look through.

Adam · ‎Feb 20 2018

A screenshot of that AP with the error in dashboard may also help us give you some advice. But @PhilipDAth suggestion is a good place to start.

Adam · ‎Feb 20 2018

This is somewhat difficult in practice since many websites access secondary resources and CDNs. May take you a while to get all of the things you need whitelisted. You can go to Network Wide>Event Log then filter for 'Content Filtering blocked URL'. This will help you identify other things you may need to whitelist.

Adam · ‎Feb 19 2018

I heard this is coming soon. Looks like it'll provide much better visibility into our wireless deployments. Has anyone seen a demo or have any other insights about it? https://meraki.cisco.com/solutions/wireless-health

Adam · ‎Feb 19 2018

If you need more consistency and potentially longer duration of event logs then you may want to consider a Syslog server. https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration

Adam · ‎Feb 18 2018

I like this upgrade, thanks.

Adam · ‎Feb 18 2018

Agreed full list is key, and I hope eventually they use their OpenDNS product instead of BrightCloud.

Adam · ‎Feb 17 2018

The best way I've found to think about Meraki's approach to firewall rules is that you don't create rules to stop inbound/incoming traffic but instead you'd create the same rule to prevent outgoing/outbound traffic. I'm not sure exactly why they take this approach since it seems slightly more vulnerable to me since the traffic could technically get to your device but your device won't reply.

Adam · ‎Feb 16 2018

True @Uberseehandel, I guess I only really refer to uplinks as any port that has the up arrow on it in the dashboard. Everything else I just refer to as an access or trunk port.

Adam · ‎Feb 16 2018

PM'd @MRCUR we can start an offtopic thread if desired.

Adam · ‎Feb 16 2018

I agree @mike318 it has been on my wishlist for a while to have a shared blocklist/whitelist for an entire org. I still like being able to individually set a blocked or whitelisted item but would be nice to have one master one as well rather than having to go through and manually add it to my 20 different networks. Edit: We now mostly use OpenDNS Umbrella to do centralized blocking through our org.

Adam · ‎Feb 16 2018

Agreed @Uberseehandel but I think @rarodrigo was trying to schedule an uplink. Interesting on the WOL observation. I haven't used that much.

Adam · ‎Feb 16 2018

I don't think you can theoretically schedule an uplink because the device doesn't cache the schedule to turn it back on. The device would go offline and not come back on if you were able to schedule uplinks. I've never tried it but that would seem like Meraki logic.

Adam · ‎Feb 15 2018

If someone else doesn't know off the top of their head I could test this on my home network later. That is the only Meraki network I have setup in Bridge mode. Would be pretty easy to confirm. Just add a layer 7 firewall rule to block a specific website and then try to navigate to that website from the wireless network.

Adam · ‎Feb 15 2018

In that case wouldn't you be undervolting the device? I'm pretty sure the standard is 48V DC 802.3af PoE but I'm far from an electrical expert. What are you wanting to try to accomplish?

Adam · ‎Feb 15 2018

Agreed with the above assessment. If you don't have vlan tagging enabled then it'll just use the default vlan or whatever you have setup for the vlan on the AP interface.

Adam · ‎Feb 15 2018

@rarodrigo by trunk port do you mean the uplink? Typically this port will show up in the dashboard with an up arrow.

Adam · ‎Feb 14 2018

Would you want alerts when both new trusted devices and untrusted devices connect? And I was thinking the same thing as @ww by using 802.1x you could fail any non trusted client to a "guest" vlan/network.

Adam · ‎Feb 14 2018

I'm not sure of a solution but are you wanting to try to alert on this for the wired network, wireless or both?

Adam · ‎Feb 14 2018

@DunJer622 can you include a screenshot? WAN Static IPs can be configured from the local status page.

Adam · ‎Feb 14 2018

Totally not trying to schmooze the thread owner but this was by far my favorite thread in the forums. I learned a ton about other users configurations and best practices. Truly a checklist of important items.

Adam · ‎Feb 14 2018

If you want to be able to get to its local status page remotely then you need to go to Security Appliance>Firewall and add your IP to the 'Web (local status & configuration)' section. Also go to Network Wide>General and check the 'Remote device status pages' setting and make sure it is set to 'Remote devices status pages enabled.'

About Adam

Adam

Community Record

Badges