Meraki

BrandonS · ‎Mar 22 2023

Beam clamps and threaded rod to a double gang box. You don't want the AP's too high if possible, so the threaded rod can let you put them at a height closer to the clients.

BrandonS · ‎Mar 21 2023

Am I last to find out that Meraki Go switches run the same firmware as "regular" Meraki? Now I wonder about the Go GX firewall and GR wireless..

BrandonS · ‎Mar 20 2023

Do you mean someone physically unplugging the AP and plugging in their own device? It would depend entirely on the switch you are using, but practically I would say no. You might find a way to use only tagged VLANs and black hole the native/default VLAN or not use DHCP as basic deterrents though. Maybe best to go for physical security like using conduit and mounting height to prevent access?

BrandonS · ‎Mar 17 2023

Actually one on 11.31

BrandonS · ‎Mar 17 2023

I just checked 5 clients I have using Go switches and they are all 14.32 or 14.33. Are they safe?

BrandonS · ‎Mar 17 2023

I only have a few clients and don't think I have had this issue yet, but can you please clarify if I am understanding correctly that even switches never been claimed may still try to upgrade themselves?

BrandonS · ‎Mar 9 2023

Kind of a wild guess, but I saw similar with a new customer recently that has Meraki. They had 8 MR's in an open office area that were about 30-50' away from each other. They had inconsistent performance and poor Zoom calls quite often. It was kind of obvious to me there was probably co-channel interference, but I verified it with a spectrum analyzer and turned the power down on all MR's to the minimum and haven't heard a complaint since. I also turned off most of the 2.4GHz radios for good measure. All that to say, maybe co-channel interference if you have too many MR's near each other with power set to auto or too high?

BrandonS · ‎Feb 21 2023

Some conflict presumably, but I agree it seems like incorrect behavior. There is a post about this, with some links to more information here too: https://community.meraki.com/t5/Dashboard-Administration/Z3C-Disabled-gateway-bad-connectivity/m-p/130002 I'll be curious to hear what you discover. Good luck.

BrandonS · ‎Feb 21 2023

Have you tried swapping connections and see if the trouble follows the ISP side or Meraki side?

BrandonS · ‎Feb 2 2023

It depends on the product and the day. Your reseller should be able to easily check anytime you ask. If you don’t have a reseller send me a message with a product list and I can check for you.

BrandonS · ‎Feb 2 2023

I am pretty sure this is fine, but it will be a first for me and I am not finding documentation to specifically confirm. The application is that a client wants a tunnel to their GCP (Google Cloud Platform) from the premise MX and also allow client VPN into GCP. I can just fire up (and license) a vMX in GCP, turn on auto VPN and configure some client VPN? I know it is also possible to make a site to site VPN. (At least, I have found some various posts where people have sorted it out, so I think I could do the same). I just think vMX is better for visibility, management and maybe performance too? VPN clients to premise MX and then over VPN to GCP may suffer performance? They have 1G x 1G internet and will soon have a second 1G internet so I think it will be ideal for auto VPN and should not really try to make it work with just site to site VPN (even though it saves the license cost)? Thanks in advance for any confirmation or caveats!

BrandonS · ‎Feb 1 2023

I think this explains the policy well and you could share with your customer. https://meraki.cisco.com/meraki-support/policies/#product-end-of-life-eol-policy

BrandonS · ‎Feb 1 2023

I use it occasionally to check details on up/down alerts from customer networks, but agree about the MV based on just some limited experience. If I spent $$ on MV for my own home or business I would be pretty disappointed with the mobile app.

BrandonS · ‎Jan 30 2023

It is not on https://status.meraki.net/ as of posting. Is it working now? What shard (nxx)? and what part of the world?

BrandonS · ‎Jan 30 2023

Maybe the same reason @cmr suspected in a post above? Maybe the device was "sleeping"/inactive at the moment showing in the screenshot and it would be normal behavior. It does seem the device was on the move between at least 3 APs. Or did the specific client report some trouble and is that an example capturing the trouble moment?

BrandonS · ‎Jan 24 2023

I never came across that before, but agree it is not good and hopefully acknowledged by Cisco as a bug. I could easily have left it alone and figured it was on 17 not knowing better and then had that cause some issue later.

BrandonS · ‎Jan 24 2023

Support just told me this via email, "..after taking a look at the logs from the Meraki side it appears that the device failed to boot properly for the new firmware. At current it looks like the device is still on the old firmware of 16.16 on the backend. What we may need to do is try to schedule or force another upgrade and make sure it makes it all the way through the process."

BrandonS · ‎Jan 24 2023

Thanks for sharing that. This MX has only one WAN uplink and the only thing of note is that the ISP handoff of 1G copper was patched to a 2.5G port on the MX originally. For troubleshooting purposes while trying to isolate the source of consistent blips of ~1% packet loss seen in dashboard we moved to a copper SFP a few weeks ago. It was on the copper SFP when this happened today. Based on your experience it makes me think it likely was "just" the WAN port stopped functioning somehow and if I had the chance I suspect the console port and local status page would have worked.

BrandonS · ‎Jan 24 2023

The title sums it up. It required a power cycle to restore service and seems fine now after monitoring for an hour or so. Nothing useful in the event logs. When I say, "locked up" I mean more specifically that the WAN port was not passing traffic apparently because it went offline in the dashboard and the end customer reported "no internet". I didn't get a chance to troubleshoot any further or see lights, etc. because the end customer power cycled themselves after verifying the ISP connection was fine. I have a case open with support, but wanted to ask here if anyone else has had the problem or knows of a bug that may be related?

BrandonS · ‎Jan 23 2023

It sounds like the SSID is not in bridged mode. You need that for external (from the AP) DHCP to function with clients.

BrandonS · ‎Jan 23 2023

If that is ugly, you haven't seen much, lol. I would let it go, but if a customer is bugging you then try a different brand of cables, or hide them in a cabinet or with a covered cable manager.

BrandonS · ‎Jan 20 2023

Unless you are actively blocking those currently, which sounds unlikely baed on your question then you should not have to do anything except ensure anything upstream from your network is not blocking. Short answer: no need to do anything in most cases. Those who need to make changes would know how and where.

BrandonS · ‎Jan 19 2023

I actually don't agree with all three points you wrote. I have customers that have or had MPLS over DSL. MPLS doesn't care what transport it goes over. There is no particular reason you can't manage and monitor your MPLS unless the provider refuses portal access and features. MPLS does not imply all traffic goes through HQ, it can be configured as mesh topology too. Besides that, I would think the main considerations are the same as just about anything in networking and technology- Save money and improve reliability (assuming 2 or more WAN connections) Maybe improved bandwidth as well.

BrandonS · ‎Jan 19 2023

I think you are correct, there is no particular technical justification to disallow the cable test and allow cycling the port on the same page. If you confirmed each side is not configured manually to 10/100 it seems likely you have a cable issue though. I would move forward on that assumption and change the patch cord or check cable and jacks between. If that all is clean then there is some possibility of a damaged port on Meraki and support should confirm and RMA,

BrandonS · ‎Jan 17 2023

I was a little concerned after seeing your post, but I just got one today for a license renewal as expected.

About BrandonS

BrandonS

Brandon Svec

Community Record

Badges