Meraki

CptnCrnch · ‎Aug 21 2019

Or somebody camouflaged a Meraki switch to look like a Cat9k? 😇

CptnCrnch · ‎Aug 21 2019

How to check in cloud console ?? Firewall logs will not be uploaded to the cloud, so the only chance is the local syslog server Nope. Can I add MAC address in local database ?? Similar to other UTM firewall.. No, and why would you do that? MAC spoofing is a piece of cake, so from a security point of view, proper authentication is the way to go here.

CptnCrnch · ‎Aug 20 2019

Happy happy birthday and big fat "thank you" for providing this platform!

CptnCrnch · ‎Aug 20 2019

Guess it's time to introduce myself as I'm feeling pretty comfortable in here: A bit about yourself & your work Working as a Principal Technology Specialist for a big Cisco partner in Europe. Involved in the IT security field for roundabout 25 years, mainly concentrating on infrastructure security. Involved with Cisco gear since 20 years, holding one or two certifications. Your experience with Cisco Meraki Started working with Meraki a few months ago and still having fun A fun fact about yourself I like the sound of analog HiFi equipment, especially the sound of vinyl.

CptnCrnch · ‎Aug 19 2019

Well, umm... 😕 I was referring to management port like "good old days, completely out of band".

CptnCrnch · ‎Aug 19 2019

There is no dedicated management port on Meraki MX. Welcome to the wonderful world of Cloud managed IT! 🙂

CptnCrnch · ‎Aug 19 2019

Update: With Public Beta 6 I was able to install the Profile correctly, my iPad is correctly identified on the Dashboard right now. Looks like it‘s working fine.

CptnCrnch · ‎Aug 19 2019

APart from that: I have never heard of an ACI device package for Meraki MX. So I'd guess the answer is "no".

CptnCrnch · ‎Aug 16 2019

Same here: Google Auth as 2FA. Admins are using Authy or Duo on their clients though for added security.

CptnCrnch · ‎Aug 16 2019

The „fine manual“ is correct (as almost always): you can have PSK or MAC filtering in Meraki world. Not both.

CptnCrnch · ‎Aug 13 2019

Same here: a lot of Raspberries running Ubuntu or Raspbian without a single issue at all.

CptnCrnch · ‎Aug 12 2019

Everything up and running (again)

CptnCrnch · ‎Aug 9 2019

You could run Jumbo Frames switch-wide and have all ports but the SAN ones have the standard MTU. Unfortunately, that‘s not possible with Meraki. 😞

CptnCrnch · ‎Aug 8 2019

Well deserved, congrats @vasallon!

CptnCrnch · ‎Aug 5 2019

Well, even then you won‘t need a dedicated mgmt interface. Go to https://mx.meraki.com and log in with credentials (hopefully set within the cloud management). Or am I getting you completely wrong here?

CptnCrnch · ‎Aug 5 2019

If you think about how management works for Meraki: does this really make sense? We worked with dedicated management interfaces for ages, with an exclusive set of internal machines that were able to reach our devices. “Nowadays“ with Meraki, management is completely performed from the outside, from the cloud even. That‘s what is completely different than the way things were handled before. Therefore (in my opinion) something like dedicated management interfaces don‘t make sense in this scenario.

CptnCrnch · ‎Aug 1 2019

Can‘t believe I even made it to Tier 3, let alone winning something! 🤪 Thanks so much and congrats to everyone else who participated!

CptnCrnch · ‎Jul 31 2019

I never had luck with such things but I have to admit I‘m eagerly waiting for the results. 😇

CptnCrnch · ‎Jul 31 2019

From my understanding, you'll have to bring your own license (or have one spare left)

CptnCrnch · ‎Jul 30 2019

Seconded, at lest that‘s what I realized today: you‘re. It able to change that. Thought this was because I‘m running beta code.

CptnCrnch · ‎Jul 30 2019

Not even when scrolling down to the bottom? Then there should be a "Make a wish"-button. At least, it's there for me, but perhaps I've not used all of my three wishes for today. 😉

CptnCrnch · ‎Jul 30 2019

Sorry to be answering this by myself, but perhaps this will help somebody someday: Actually, it is working as expected right now! Seems like the cellular connection was kinda flaky with my first tests. I simply disabled No-NAT for WAN2, made sure I had a stable LTE signal and everything worked flawlessly. Strangely enough, it doesn't seem to work when WAN1 is set to No-NAT. I know you guys aren't too happy with the way No-NAT is implemented currently but this could be something to remember when developing this further. Thanks a million @Raj66 for the hint!

CptnCrnch · ‎Jul 30 2019

I was able to do some more testing now with only WAN1 being No-NAT enabled (OS is 15.15): 1) The MX itself was failing over to cellular as expected. I could see the mobile providers' IP on the dashboard 2) On the local MX status page, the connection was also showing up as "Connected", the speed test had some good results 3) Strangely enough, the dashboard didn't provide any information about the cellular connection at that moment 4) No internal client was able to access the internet though I guess it's really narrowing down to the No-NAT feature.

CptnCrnch · ‎Jul 30 2019

Auto-VPN is Merakis "propriatery" VPN solution for Hub-and-Spoke and / or Mesh VPN networks: https://meraki.cisco.com/technologies/auto-vpn. It is in fact a "standard" Site-to-Site VPN solution but much easiert to manage as almost everything (up to configuration parameters) is provided though the Cloud dashboard. Of course you can do things like Split- or Full Tunneling, but it doesn't sound like it's the thing you're searching for. From my point of view, there's no equivalent to VTIs on Cisco routers or ASAs in the Meraki world.

CptnCrnch · ‎Jul 30 2019

If you're referring to SD-WAN technologies: it defintely does, even more. PLease find more information here: https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/Meraki_SD-WAN#SD-WAN_Technologies Apart from (Meraki-"internal") Auto-VPN I'm not aware of something like Route-based VPN.

About CptnCrnch

CptnCrnch

Chris

Community Record

Badges