Meraki

jdsilva · ‎Aug 20 2018

Oddly enough, @PhilipDAth, they do.

jdsilva · ‎Aug 20 2018

Go here: https://meraki.cisco.com/support/ And then type "MS ACL" in the search bar. The first result should be what you're looking for.

jdsilva · ‎Aug 14 2018

And here I thought you just really liked books... 😉 You won't be able to do this for the last year... But if you use the Summary Reports page under Organization > Summary Reports you can pull 6 month intervals and add them together. I'm not sure if this will do... But it might be as close as you can get. The other option would be to call Meraki support and ask them to pull that data for your fiscal year (I don't know if they can... But worth asking).

jdsilva · ‎Aug 14 2018

Very cool! My last name is Portuguese... Does that count? (I don't know how to speak it 😞 )

jdsilva · ‎Aug 10 2018

Enter the device serial number as username. Leave password blank.

jdsilva · ‎Aug 10 2018

Yeh I'm sure there's a way to get this done, but you're going to have to handle all of the SMS stuff yourself somehow. Meraki doesn't have any tools to help you, all they offer is Twilio. The ExCap config guide has some good info on what info goes back and forth, and what you need to send. It doesn't have any info on doing your own SMS ExCap specifically, but I would think it would have useful info to help you get it done. https://meraki.cisco.com/lib/pdf/meraki_whitepaper_captive_portal.pdf

jdsilva · ‎Aug 8 2018

Nope, no issues. You can do this and it shouldn't be problematic. The only consideration you have is that new clients connecting to the network can't get an address when there's a WAN outage. But if there's an outage does it really matter? Just make sure the DHCP server address is included in the VPN networks so you have routes in place.

jdsilva · ‎Aug 7 2018

FINALLY one of these with USB C! I can actually use this with my phone 🙂 Thanks @CarolineS!

jdsilva · ‎Aug 1 2018

Nice work guys! And thank you to everyone for the kudos.

jdsilva · ‎Jul 25 2018

Holy crap! I can't believe that worked! OK, so if you want to do a LAN to LAN hairpin you can leverage the 1:Many NAT feature to make this happen. To test this I have a Raspberry Pi behind an MX on VLAN 10 with an IP of 192.168.100.5. I then created the following 1:Many Nat rule under Security appliance > firewall: So then as a test I then SSH'd to the 1:Many IP, which "hairpins" me back to the same Raspberry PI. Very cool. I expect this would work the same for a 1:1 NAT as well. So while not quite a true hairpin, it does the exact same thing.

jdsilva · ‎Jul 25 2018

I don't think you can... The MX only NAT's between WAN and LAN interfaces... There's no way that I'm aware of to do a LAN to LAN or WAN to WAN NAT on it. But... Maybe you can sort of do the same thing if you create a 1:1 or 1:Many NAT... Hang on let me try this...

jdsilva · ‎Jul 25 2018

Yup

jdsilva · ‎Jul 25 2018

Nope, you shouldn't need a rule on the MX. It'll just pass through whatever markings are already there. You would only need something if you wanted to give it some sort of priority.

jdsilva · ‎Jul 25 2018

That looks like a capture from the radio side? What does a capture on the wired side look like? Also, if you're marking AF41 then that's in the IP headers and not the 802.11 headers.

jdsilva · ‎Jul 24 2018

@RogerO wrote: my internal apps team which they do not know what URL's they call I'd act surprised... But I'm not. Man, life would be so much better without developers 🙂

jdsilva · ‎Jul 24 2018

I wish I had better whitelist formulas to offer you... 😞

jdsilva · ‎Jul 24 2018

If it is AMP blocking then it _should_ appear under Security appliance > Security centre under the Events tab. Note that I say _should_ ... You could also just whitelist your internal applications in AMP under Security appliance > threat detection. And last thought, what version are you on? We've had much better AMP performance / results up in version 14.x than in some of the older firmwares.

jdsilva · ‎Jul 24 2018

There is no compatibility between the Meraki MX and any vendor for SD-WAN features. I'm not aware of any SD-WAN implementation from any vendor that's compatible with another vendor... You can nail up an IPsec tunnel between an MX and another device, but you will not get any of the SD-WAN features.

jdsilva · ‎Jul 24 2018

You can see the connections being made through the box via Syslog. There's no way to view this information through the dashboard, only via external logging.

jdsilva · ‎Jul 18 2018

@Darrell Not exactly. It can use multiple IP's for inbound traffic. So you can do DNAT on inbound traffic. What you cannot do is SNAT on outbound traffic.

jdsilva · ‎Jul 16 2018

I got mine today too! I didn't realize the MotM's got stuff. I never read that thread before... That was a pleasant surprise this morning 🙂 Thanks as well to everyone who kudo'd and solutioned my posts! And thanks to @CarolineS for all the work on the forums!

jdsilva · ‎Jul 12 2018

That is correct. As Meraki implements RSTP (802.1w) there is only one instance of STP on the switch, and all VLANs will forward traffic based on that instance. On a Cisco Catalyst the default is PVST+ where one STP instance is run on each VLAN, and you can set the priority of each instance.

jdsilva · ‎Jul 12 2018

https://documentation.meraki.com/MS/Monitoring_and_Reporting/Switch_Port_View

jdsilva · ‎Jul 12 2018

That is correct. The uplink port has nothing to so with anything STP whatsoever.

jdsilva · ‎Jul 12 2018

The uplink port is the port the switch is using to talk to the Meraki cloud. It has nothing to do with up- or down-link within your LAN.

About jdsilva

jdsilva

Community Record

Badges