Meraki

Uberseehandel · ‎Mar 10 2018

Claudio In some countries O2 offers a fixed line service such as - https://www.o2.co.uk/business/products/broadband/high-speed-internet also there is the mobile LTE service - https://www.o2.co.uk/shop/inspire/mobile-broadband-explained#section4 The maximum speeds available depend upon country and location within that country.

Uberseehandel · ‎Mar 10 2018

Is that O2 land line ISP or LTE ISP service? It makes a difference.

Uberseehandel · ‎Mar 9 2018

@AbrahamMunoz A similar thing happened to me. I think it was caused by a firmware/software upgrade, so that the "new" attribute for the network was left blank by the migration process. All I had to do was enter the correct regulatory domain (country) for the network (it figured out that this was part of the larger European spectrum management system) and the error messages ceased. In my case, there was no need for involvement from support, but as I deal with regulatory issues I knew what the error was when I saw it, as it had all been covered at a recent ITU conference.

Uberseehandel · ‎Mar 8 2018

@Arharris712 Looking at the MS220-8P I am currently using, I would observe: the uplink (port 10 in this case) only passes the 7 VLANs in use. the switch gets its IP from the Management VLAN (which is one of the 7 allowed) there are no default or native VLANs (it is nailed down) for specific cases I use VLAN 101, which does not exist, to allow a port to be configured (all are currently disabled) only access port have a VLAN as opposed to allowing a number of VLANs Without my required paranoid switch configuration requirement, I found the switch, once adopted, works without any configuration. All ports are trunk and all VLANs are permitted, by default.

Uberseehandel · ‎Mar 8 2018

an elfin person arrived bearing really useful gnomic gifts. Many thanks, everybody, and much appreciated. I was actually considering getting something along the same lines - so the timing was brilliant . .

Uberseehandel · ‎Mar 6 2018

I do not use Google Cloud Print, but I can confirm that Chromecast functions correctly, as long as devices are on the same VLAN. You may like to try turning on Bonjour support, there is an outside chance that this will allow everything to function properly. Helpful information about ports etc - here

Uberseehandel · ‎Mar 5 2018

@CarOneAdminwrote: MRCUR, Yes. i am using meraki hosted auth. But my question it`s how i can avoid the user & password sharing. i want only 10 machines with windows 10 connected to this SSID without the capacity of connect from another device. ....... Only 10 devices, have you considered JumpCloud - Directory as a Service ?

Uberseehandel · ‎Mar 2 2018

@BrothersTMwrote: Do you manage an education environment and its users? It's proven to be very effective for this environment. The kids tell me otherwise.

Uberseehandel · ‎Mar 2 2018

Why go to so much trouble when MAC addresses are inherently insecure? Even kids can change MAC values. Far better to use certificates.

Uberseehandel · ‎Mar 1 2018

Most grateful, thank you.

Uberseehandel · ‎Mar 1 2018

I suggest you investigate using System Manager to facilitate implementing access security without relying on MAC addresses. This will avoid the use of shared passwords

Uberseehandel · ‎Mar 1 2018

Here are the University of Pittsburgh wired instructions http://technology.pitt.edu/help-desk/how-to-documents/pittnetwired-configuring-windows-10-wired-publicly-accessible-network

Uberseehandel · ‎Mar 1 2018

You may find this helpful - http://technology.pitt.edu/help-desk/how-to-documents/pittnetwireless-configuring-windows-10-wireless-pittnet Many US universities use 802.1X and they all publish instructions as to to how to configure client devices.

Uberseehandel · ‎Feb 28 2018

@Robertsonwrote: Can someone asure me they will work and be reliable? Thank you I suggest you apply fr a couple of loan switches and see what happens in your environment under realistic conditions.

Uberseehandel · ‎Feb 26 2018

have you considered asking them what they are doing?

Uberseehandel · ‎Feb 23 2018

Have a look at this for starters - https://documentation.meraki.com/MR/Encryption_and_Authentication/Certificate-based_WiFi_authentication_with_Systems_Manager_and_Meraki_APs Check if it meets your needs. There are plenty of people on this forum who have in depth experience of this. To date my use of certs is a little different but I am contemplating switching to this general method.

Uberseehandel · ‎Feb 23 2018

@rob1986b wrote: Thanks for the ideas, unfortunately no joy just yet. So far I have tried adding a L7 http hostname block on whatsapp.net and WhatsApp.com. Any other ideas? Quite a lot of information on github and Sophos

Uberseehandel · ‎Feb 22 2018

@CarOneAdmin wrote: Dear, it`s possible make an SSID based on MAC adress access control with meraki radius log in?. i try to make this by the meraki administration and i´m not allowed. Regards! For the purpose you describe, MAC addresses are about as reliable as chocolate teapots. Better to use a certificate based system. Junior school kids know how to spoof MAC addresses.

Uberseehandel · ‎Feb 21 2018

@ccnewmeraki wrote: TLS 1.2 is not due to be depreciated at any point in the immediate future. That isn't what depreciated means.

Uberseehandel · ‎Feb 21 2018

@BlakeRichardson said - I had an incident two days ago where I noticed in our network client list an Axis camera connected to a subnet it shouldn't have been. A quick look at the client > Switch > port > patch panel lead to the device being connected in a highly sensitive area. I immediately shut down the connection and traced the device...... Only to find it was a Sony smart TV that Meraki for some reason thought was a camera. Long story short Meraki is awesome at being able to trace devices down to they physical connection with little hassle. Are you sure it is a Sony Smart TV? My experience has been that Meraki identifies the Android Smart TVs from Sony, but incorrectly identifies the sound bars/sound bases/home theatre units. I have previously lodged a report of a sound base being mis-identified as an Axis camera and after reading your post checked how the dashboard identifies a sound base on the test network - Sony DD-WRT router - the adjacent Sony Bravia Android TV is correctly identified as Sony Android. The relationship between the two can be quite symbiotic. The devices are ChromeCast capable and it is easy to automate them so that when my phone come within BLE range they are turned on. But being IOT-level kit, I am concerned about how secure they are, and how often security patches are issued (August 2017). Unfortunately, I have not yet managed to get a ChromeCast client device on a secure network to access the ChromeCast Server capable devices when on a different VLAN, despite enabling Bonjour and opening up the ports that Google claims are required. But one of the benefits of using Sony TVs is that they make better 4K monitors than most of the other brands.

Uberseehandel · ‎Feb 20 2018

Delighted to say that my fridge arrived safely. I now have the excuse I needed to go and get some bottles of (overstrength) Belgian beer, as it comes in a bottle of the right size to fit the interior space (the exterior size is 7U) Thanks everybody

Uberseehandel · ‎Feb 17 2018

There is a feral gang of gnomes loitering outside by the bins, I need somebody to sort them out. So, not to coin a phrase - I'm In! (my response has already been lodged)

Uberseehandel · ‎Feb 16 2018

@Adam wrote: Agreed @Uberseehandel but I think @rarodrigo was trying to schedule an uplink. The link between the AP and the switch could be described as an "uplink", it carries several VLANs and needs RSTP if there is any possibility that a MiFi mesh might be created. As far as shutting down a device goes, whether one shuts down the switch port (and the power supplied) or turns off the remote device, the effect is the same, but one is controllable by configuration, and the other is not.

Uberseehandel · ‎Feb 16 2018

@Adam wrote: I don't think you can theoretically schedule an uplink because the device doesn't cache the schedule to turn it back on. The device would go offline and not come back on if you were able to schedule uplinks. I've never tried it but that would seem like Meraki logic. When some of the posters on this topic are talking about uplinks/trunks, I believe that they are describing the connection between an AP and the switch. As long as the device is a PoE client, then being turned on and off can be scheduled at the switch port rather than the device itself. Interestingly, I haven't discovered why some hosts(client devices) respond to the Wake-on-LAN packet and others do not.

About Uberseehandel

Uberseehandel

Community Record

Badges