Meraki

jdsilva · ‎Jun 7 2018

Sorry @ScottWinCO, the .249 addresses are not on the MXes. I think you've interpreted that incorrectly. EDIT: To clarify, that diagram shows L3VPN. If we have a VPLS service then the second part of your statement is correct and they would not exist.

jdsilva · ‎Jun 7 2018

Those routers look to be the PE routers in an L3VPN service.

jdsilva · ‎Jun 7 2018

Hey @rcherrera. There is no way to export a complete configuration out of the Dashboard. You can get a fair bit through the API, but there's nothing you can do in the way you are asking.

jdsilva · ‎Jun 6 2018

I seem to be missing pants... 😉 Thanks for the new shirt and buttons @CarolineS !

jdsilva · ‎Jun 6 2018

Cool. Glad to hear it's working better now.

jdsilva · ‎Jun 5 2018

The only logs you can see are under Network-wide --> Event log. That won't have anything about the config sync in it though. If you export to Syslog you get more detail, but I still don't think there's anything in there about the config sync.

jdsilva · ‎Jun 5 2018

This is likely best solved by support. They can access the error logs that will tell you why the config is failing to sync. I'd give them a call.

jdsilva · ‎Jun 5 2018

Nope, you can't do this short of hiring an FTE to sit there and export footage, one hour a time, for days on end. If this is a hard requirement for you then you're really looking at the wrong product. This isn't a use case that the MV's are designed for.

jdsilva · ‎Jun 4 2018

I thought there was a minimum amount of data per time period that needed to be met before a device showed up in the clients page? I don't think a Meraki AP doing normal dashboard "stuff" meets that threshold.

jdsilva · ‎Jun 4 2018

Stupid sticky clients 😞

jdsilva · ‎Jun 4 2018

This should help with most of the request: https://documentation.meraki.com/MX-Z/Deployment_Guides/MPLS_Failover_to_Meraki_Auto_VPN The part I think you won't be able to do is isolating VLAN 999 to just go out the Internet... You can exclude VLAN 999 from the Auto VPN, but if you have a 0.0.0.0/0 pointing over the MPLS then you won't be able to stop traffic from going that way. Maybe someone else here can chime in on how this can be done...

jdsilva · ‎Jun 4 2018

VRRP hellos are sent out on every VLAN for which VRRP is running, on all available ports. Meraki does not supply any settings to control which port(s) these are sent on. So regardless of that "VRRP" cable, you are still sending via the switches.

jdsilva · ‎Jun 4 2018

@RH6379 wrote: Connect MX84's to each other for VRRP Don't do that. It causes a bunch of STP instability. And I have it from a reliable source that Meraki is going to remove this from their recommended topology 🙂

jdsilva · ‎Jun 1 2018

You could also try turning the power down a bit on the 30H to make it look less desirable to the TV. You'll need to be careful with this as you don't want to impact your mesh or your coverage area, but if they're all going full power now then you likely have some room to play with.

jdsilva · ‎May 31 2018

Yup, this will work on every model of MX. You have it exactly right.

jdsilva · ‎May 31 2018

Hi @StuKoalaIT. I would say no, it's not sensible for the PPPoE settings to be available in the dashboard. I say that because in order for that to be viable the MX needs to be connected to the dashboard to receive the config update. To be connected to the dashboard it needs to have an active WAN link. To have an active WAN link PPPoE needs to be configured. So you end up with needing PPPoE configured to configure PPPoE 😞 Just my $0.02.

jdsilva · ‎May 30 2018

The MX does not have any ALG functionality at all. So if your H.323 is relying on that you're not going to be a happy camper 😞

jdsilva · ‎May 30 2018

Under "Security Appliance" do you have the "Threat Protection" Option? If not then you're Enterprise.

jdsilva · ‎May 30 2018

They don't need a public DNS server. I have lots that point to the private IP of my MX (that's also the DHCP server) and they work just fine. It's more likely that something is failing resolution using that DNS server.

jdsilva · ‎May 30 2018

Yes, if you have an Advanced license on it. No, if you have an Enterprise license.

jdsilva · ‎May 30 2018

AFAIK there's no way to filter what messages are sent. You likely will have to filter this out on the Syslog server side.

jdsilva · ‎May 29 2018

Right! I meant to add that the wireless feature isn't slated for release till the fall. Thanks @MRCUR mentioning that!

jdsilva · ‎May 29 2018

Hah! Neat use case. For one elevator I might look at mounting an AP in the top of the shaft (maybe with a panel antenna?) and using the MV12 on a wireless link... But I'm totally thinking out loud here and I have no idea how well that would work.

jdsilva · ‎May 29 2018

1. You can't. 2. You can use the filters at the top to show you only the events you care about, or remove the ones you don't. There's also a "Before" filter to go back in time, but that's about all you can do. Your other option is to enable Syslog on the devices and send all the logs to a Syslog server. From there you can use your favourite log management tool to get done what you need.

jdsilva · ‎May 23 2018

No, you can't add them to the Meraki Dashboard. You have to configure them the same way you always have.

About jdsilva

jdsilva

Community Record

Badges