Meraki

BrandonS · ‎Dec 5 2018

SD-WAN is simply a term to describe dynamic and configurable network access via multiple WAN (internet) links. A common example would be to have two different internet service providers connected to a Meraki MX appliance and configure the MX to send voice traffic on the link with the lowest latency, jitter and packet loss. You will be able to monitor the links in the dashboard and see when the MX has made decisions dynamically to route voice traffic over either link. The links may also be site-to-site VPN links to other branches or locations. Many organizations are choosing to move away from expensive dedicated WAN links to SD-WAN since the performance can be similar and the price less. Here is simple diagram depicting two MX appliances each with two internet connections and site to site VPN:

BrandonS · ‎Nov 7 2018

Actually, based on "Also if Z1 is literally just powered on, no LAN or internet cables attached it will reboot bang on 16 mins 45 seconds. I think maybe 2 or 3 times it's rebooted around 14 to 15 mins. " I think you have an easy case to get a replacement shipped out from Meraki.

BrandonS · ‎Nov 7 2018

I suggest asking your IT support nicely to escalate this to Cisco Meraki support. If Meraki support does not have any good ideas they will normally send out a replacement without much hassle. I manage plenty of Meraki gear and have never heard of anything like the particular issue you describe. I would guess it is either the Z1 is bad or there is some rare compatibility issue with your ISP gear. Replacing the Z1 should help determine where to look next if it does not solve the issue.

BrandonS · ‎Nov 7 2018

@ph0t0g wrote: Oh, OK. So it's just E.T. phoning home. Thx Haha. Does anyone here remember ROLM? I used to have a bumper sticker back in the 80's that said, "E.T. phone ROLM"

BrandonS · ‎Nov 7 2018

Why is the title of your post, "Client VPN split tunneling?" I have split combined networks and combined them again and not seen any service interruption or other trouble. I did this most recently to get rid of an old demo MC network I had in one of my combined networks. If anything, you *might* lose historical data like client usage. If that is important, I would call support or research more to find out.

BrandonS · ‎Nov 7 2018

I am pretty sure that is just part of the normal connectivity testing al Meraki products do. This is for MX, but probably similar for MS, etc. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Connection_Monitoring_for_WAN_Failover

BrandonS · ‎Nov 6 2018

Thanks for the great replies! I think the last thing I am wondering is if I need to consider anything for my single switch. I can just plug LAN 1 on each MX into my single switch instead of the two like diagramed here? Or do I want a VLAN for the connectivity between MX also? That seems the same as a direct cable though.. And maybe I want an MS120-8 on the WAN side with two VLANs (one for each ISP between their handoff and the MX's). It looks like a need a total of 3 IP addresses from each ISP, right? Going with number 1-4 on the diagram Comcast: 1: 1.1.1.1, 3: 1.1.1.2 at&t: 2: 2.2.2.1 4: 2.2.2.2 Then also two VIPs like 1.1.1.3 and 2.2.2.3? Thanks again.

BrandonS · ‎Nov 6 2018

Can someone help me clear up some doubts about how to configure this? I have read https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair and also https://www.willette.works/mx-warm-spare/ 1. Is it not good to connect the MX's directly to each other anymore? Do I need to care why? 2. Do I need 2 switches also? I prefer to have one switch only and only have HA for if one internet goes down or one MX fails. For this instance I am not concerned about 'core' switch failure. 3. How do I handle client VPN if one internet fails? Users need to know two different IP's to connect to potentially? 4. This customer uses public IP whitelisting to access some cloud services. I am not clear on the VIP configuration. I will have one VIP from each ISP that would need to be whitelisted by the service providers I guess? Thanks for any help. I have been working with Meraki for some time, but not yet configured HA.

BrandonS · ‎Oct 22 2018

I would try a new SSID with default settings for testing. Then change one thing at a time to see if it breaks again. Did you enable 802.11r or change the RF profile at all?

BrandonS · ‎Oct 21 2018

What settings do you have on the Meraki side? It sounds like you chose something Apple doesn't like.

BrandonS · ‎Oct 16 2018

Here is some info about the enhanced service levels. I am a reseller and have never sold these yet, but I can see how some customers may want them: https://meraki.cisco.com/lib/pdf/meraki_now_solution_guide.pdf

BrandonS · ‎Oct 16 2018

MR Enterprise license is required to operate the MR and includes 24/7 phone support and NBD hardware replacement. You don't need additional services, but they are available if you want better response time and hardware turnaround.

BrandonS · ‎Oct 15 2018

a) LIC-MS425-32-10YR b) LIC-MS350-24P-10YR c) LIC-MS350-48FP-10YR Let me know if you want a price too 🙂

BrandonS · ‎Oct 12 2018

I decided to try it out and got it working. Where are you having trouble? My biggest issue was messing with Windows firewall to allow connection to the installed collector.

BrandonS · ‎Oct 10 2018

That's true about limited alerts. Assuming you have the license and IPS/IDS and AMP enabled you can send security events to your own syslog server or a cloud one like papertrailapp.com. That is what I do- From there you can trigger email, SMS alerts or hook into Slack, Glip, etc.

BrandonS · ‎Oct 10 2018

You probably don't have the security license or if you do, didn't enable it. Try that and check again.

BrandonS · ‎Oct 10 2018

@IanH wrote: Thanks, is that a Screen Shot from a live MR74 Online Configuration Portal? It is. I just installed my first ones yesterday and realized I needed 2x ANT-27 for both bands.

BrandonS · ‎Oct 10 2018

I am pretty certain it will work. You may want an ANT-21 to pair with it though. The MR74 has two pairs of antenna connections, one for 2.4 and on for 5GHz. Here is from an MR74 screen:

BrandonS · ‎Oct 9 2018

Makes sense, thanks. I'll just put the radio on the same pole below the antenna.

BrandonS · ‎Oct 9 2018

I am installing two MR74s and I only ordered two ANT-27s. I plan to get two more ANT-27 so I can point coverage for both bands from the top of a two story building out across an open outdoor area. My question is about mounting the MR74 itself. Should I bother facing it out toward the desired coverage area or just worry about the antennas? Thanks in advance.

BrandonS · ‎Sep 23 2018

The problem could be the UDP timeout on Meraki (that you cannot change) You should be able to adjust the timer on your Avaya gear to be longer though to try to resolve this.

BrandonS · ‎Sep 19 2018

Are there many videos you want to whitelist? Would it be possible to download them and host them somewhere else that you have more control of? I also wonder if Cisco Umbrella or similar might help accomplish this.

BrandonS · ‎Sep 13 2018

CVDs? Not sure what that is. MR33 is not designed for high density itself, but on the other hand warehouses are not usually high density wireless usage. More likely you want to consider the MRs with external antennas to aim signal down tall aisles in a warehouse or toward the floor if you are forced to mount them very high above the clients.

BrandonS · ‎Sep 11 2018

MR18 are a bit old and I could see how you have poor performance if you have a lot of users with various devices connecting. Do you have access to the dashboard so you can look at things like channel utilization and how many clients are connecting and how much traffic they are passing? I would start there and then consider how to change things or adding/replacing MR's.

BrandonS · ‎Sep 11 2018

Which model MR do you have now and how many? Have you looked at the dashboard to see how many connections you have too?

About BrandonS

BrandonS

Brandon Svec

Community Record

Badges