Meraki

jdsilva · ‎May 21 2020

The default window size in an iPerf TCP test is abysmal. You should be adjusting that to get more accurate real world results.

jdsilva · ‎May 15 2020

If you call support and ask they will provide them.

jdsilva · ‎May 14 2020

Hey @BobaTeaGood, I'm sorry to say this is well known. The Webhooks feature uses the same infrastructure as the email alerts and SNMP Trap, which is by design not meant to be immediate. All of those have anywhere from 2 to 10 minutes of delay on an event happening, and the alert being sent. If you're seeing 2 minutes you're actually seeing much better than I usually get.

jdsilva · ‎May 14 2020

Official Meraki stuff is here: https://community.meraki.com/t5/Learning-Hub/ct-p/hub

jdsilva · ‎May 14 2020

I did a couple years ago for testing purposes. I had interface traffic working, but that's about it. Not much is available via SNMP to graph 😞

jdsilva · ‎May 14 2020

@cmr wrote: @jdsilva @RichPekarsky is referring to the street address, not the layer 1 address. Haha WOW I can be pretty dense sometimes! I'll go back to my hole now.

jdsilva · ‎May 13 2020

The spareMX uses the same physical address as the primary. When the spare is Passiveit does not send any frames on the LAN whatsoever. Once the spare becomes Master it then uses the MAC of the Primary. Here's some pcaps to illustrate: Primary as Master, sending VRRP: And the Spare, now as Master, sending VRRP: The only way you can actually tell the difference it looking at the Priority value of the VRRP packets to know which device the it came from. I assure you though, these were sent from two different MX's that were in a Warm Spare.

jdsilva · ‎May 13 2020

@jriordan HAHA ok well I can't win... Might as well turn everything off again 😛

jdsilva · ‎May 13 2020

Are you talking about the LAN address?

jdsilva · ‎May 13 2020

I'm in!

jdsilva · ‎May 13 2020

Hey @Jamest201, You haven't provided enough information to give you a detailed answer, but generally speaking you can use Flow Preferences found on the Security & SD-WAN > Traffic shaping page to control how traffic is forwarded through both the overlay and underlay. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences#Flow_Preferences Note, these only apply to traffic going from LAN to WAN. If you're trying to do LAN to LAN for this then you only have simple routing at your disposal.

jdsilva · ‎May 11 2020

@CptnCrnch There are plenty of use cases where maximum MACs is a totally valid solution. Judging from your comment I don't think you understand what's being asked for.

jdsilva · ‎May 11 2020

The framework to do this is available, but you're going to need to build something that can ingest the location data and present it in a meaningful way. Meraki has the Scanning API to export location data (both wifi and bluetooth) from the dashboard: https://developer.cisco.com/meraki/scanning-api/#!introduction But that just sends a data stream to the collector of your choice. One you have that data you will need to do something with it. The raw JSON formatted location data provided isn't much use to most humans in that format.

jdsilva · ‎May 11 2020

Hi @mugrene, To do this you will need to apply the content filtering rules through a Group Policy. https://documentation.meraki.com/zGeneral_Administration/Cross-Platform_Content/Creating_and_Applying_Group_Policies I would think the best way is to create your GP with the schedule and content rules you want, and then apply it to the VLAN you want to enforce those rules on.

jdsilva · ‎May 7 2020

No, you can't do this.

jdsilva · ‎May 7 2020

You can get a lot of that data through the API. https://api.meraki.com/api_docs/v0 https://developer.cisco.com/meraki/api/#/rest

jdsilva · ‎May 7 2020

Unfortunately, the "Utilization" graph is not CPU alone. That value is a combination of all available resouces on the MX, including memory. Meraki does not expose CPU utilization alone for you to view, only Meraki can see that.

jdsilva · ‎May 5 2020

Well done everyone! Great work all around.

jdsilva · ‎Apr 30 2020

Are you pinging between Widows machines? Turn off Widows FIrewall.

jdsilva · ‎Apr 22 2020

Welcome! Always good to see more fellow Canadians here!

jdsilva · ‎Apr 22 2020

The only streaming API available is the Scanning API that's for location data. https://developer.cisco.com/meraki/scanning-api/#!introduction Not streaming, but there is also Webhooks available. https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Webhooks Other than those two options you must poll the Dashboard API for all other data.

jdsilva · ‎Apr 21 2020

I looked into this style of 1:1 NAT a while back and as near as my testing could tell this works just fine. I also bounced it off a couple technical people on our account team and there were no objections to deploying it. It's a little weird to look at, and might confuse support folks unless it's ducmented properly, but it should be a perfectli viable solution.

jdsilva · ‎Apr 17 2020

Hey @Roberto4. Welcome to the community!

jdsilva · ‎Apr 17 2020

I think you should space them a little further apart to get better coverage. Maybe mount them on the ceiling too? Otherwise, looking good! 😉

jdsilva · ‎Apr 8 2020

I'm wondering if there's some confusion around the fields here? Name is just a textual description of the static route. A comment or a remark, if you will. Subnet is the destination you are trying to match in CIDR notation. Gateway IP is the next hip IP address you want to forward traffic to. Are you by chance meaning something like this:

About jdsilva

jdsilva

Community Record

Badges