Meraki

rhbirkelund · ‎Feb 17 2023

Can you describe a bit more on what you're trying to achieve? In principle you can connect as many MXes as you want - they just need a way to the internet to check in with Meraki Cloud.

rhbirkelund · ‎Feb 15 2023

Interesting, since I came up with it myself last night. Are you also using Asyncio? Because that is not stated in your post, which is also why I made the suggestion. But nevermind then, carry on. To my knowledge, there is no other way.

rhbirkelund · ‎Feb 14 2023

You may need to open a case with Meraki in order to enable AP Name advertising again. It was removed from the CCX extensions some firmware releases ago. See this

rhbirkelund · ‎Feb 14 2023

Try this.. #! /usr/bin/env python3 from datetime import datetime import asyncio import meraki import meraki.aio async def GetWirelessUsageHistory(p_dashboard: meraki.aio.AsyncDashboardAPI,p_network_id,p_client): """https://developer.cisco.com/meraki/api-v1/#!get-network-client-policy""" try: ClientPolicy = await p_dashboard.networks.getNetworkClientPolicy( p_network_id, p_client['id'] ) except meraki.AsyncAPIError as e: print(f"Meraki API error {e}") return -1 except Exception as e: print(f"Some other exception {e}") return -2 if ClientPolicy['devicePolicy'] == "Group policy": p_client['groupPolicyId'] = ClientPolicy['groupPolicyId'] else: p_client['groupPolicyId'] = None return p_client async def main(): """Main function routine""" network_id = "" AllNetworkClients = [] dashboard = meraki.DashboardAPI( suppress_logging=True ) GetAllNetworkClients = dashboard.networks.getNetworkClients( network_id, total_pages='all' ) async with meraki.aio.AsyncDashboardAPI( maximum_retries=5, suppress_logging=True ) as aiodashboard: GetGroupPolicyTasks = [GetWirelessUsageHistory(aiodashboard,network_id,client) for client in GetAllNetworkClients] for task in asyncio.as_completed(GetGroupPolicyTasks): ClientData = await task AllNetworkClients.append(ClientData) return 0 if __name__ == "__main__": ScriptStart = datetime.now() loop = asyncio.get_event_loop() loop.run_until_complete(main()) print("\n$Time Elapsed:",datetime.now()-ScriptStart)

rhbirkelund · ‎Feb 13 2023

Could the Usage History be off due to difference in timezone?

rhbirkelund · ‎Feb 12 2023

Yeah - open a case with Meraki Support..

rhbirkelund · ‎Feb 12 2023

I think you might want to open a case with Meraki for this one. Are you sure the filter-id attribute on the radius server matches 100% with the Group Policy name? Can you try without the underscores(_)?

rhbirkelund · ‎Feb 8 2023

Interesting. I think you should open a case with Support then, and inform them of your findings, in regards to perhaps updating the Datasheet and Hardware Installation Guide.

rhbirkelund · ‎Feb 8 2023

That could most likely be the issue yes.

rhbirkelund · ‎Feb 8 2023

You mean something like this one? https://developer.cisco.com/meraki/api-v1/#!create-organization-alerts-profile

rhbirkelund · ‎Feb 8 2023

On the Meraki Documentation site, there are lots of information on configuration and operation. But as always, navigating the documentation site is a complete disaster. If it weren't for third-party search engines, I feel that no-one would be able to quick and easy find the help they need. With regards to Best Practices, the Meraki Documentation site also contains lots of information, and lately I've found my self learning more and more towards the recommendations given in the best practices documents. One of these documents are https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design But to be completely honest, I have absolutely no idea what's in that article. The reason why I don't know what's in that aricle is because there is SO MUCH information, the article itself it daunting to read. I think that either; a) Add a structural overview of the article. e.g. a Table of Contents, or b) split the article up into their parts, and link to them from within a "master document". In addition to, what seems to be a Master Best Practice document, I've found two different versions of a Meraki MS Best Practice document, which both seem to contain somewhat the same info. One article was updated in November, 2022, and the other updated in October 2020. https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MS_Switching/General_MS_Best_Practices https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MS_Switching I really wish that more ressources were given to updating the Meraki Documentation page, streamlining information, and making it easier to browse through the articles. Because frankly - its current state is ridiculous.

rhbirkelund · ‎Feb 8 2023

You are correct in the sense that the Meraki documentation seem to state that .3af is not supported. But looking at the Cisco Datasheet for the CW9164I-E AP, it says that the AP will power up, but radios will be down. Are you able to verify at your sites that clients are connected to the CW9164I-MR AP? And that the APs radios are indeed up? You can do this perhaps, by taggin the 9164 APs, and configure SSID Availability to broadcast a test SSID only on APs with the tag on the 9164s.

rhbirkelund · ‎Feb 7 2023

Do you have the SMB server subnet in your route-table? And also the return route?

rhbirkelund · ‎Feb 7 2023

Instead of having the SSID in NAT mode, try putting the device directly on the network, using Bridge Mode.

rhbirkelund · ‎Feb 7 2023

Meraki is Cloud Managed network. This implies that all configuration in general lies in the Cloud. If the device has been factory reset, all configuration on the device is removed, and the device will attempt to contact the Cloud, inorder to download a configuration for the device. Now, if the device is also unclaimed, there will be no configuration for the device in the Cloud. In my opinion, factory reset, and unclaim should be sufficient. The device won't be able to build a VPN tunnel into the Customers network.

rhbirkelund · ‎Feb 7 2023

The MX Performance Score, is an expression of Device load, ranging from 1 to 100. It's an average calculated every 60s. https://documentation.meraki.com/MX/Monitoring_and_Reporting/Device_Utilization#Reading_Device_Utilization_via_API

rhbirkelund · ‎Feb 7 2023

Or use the a posteriori knowledge, that the default rule is always at the end of the list and simpy "pop it". 😉 # Remove Default Rule entry FirewallRules['rules'].pop(-1)

rhbirkelund · ‎Feb 7 2023

You could do something along the lines of # Constants netowrk_id = "xxxx" TargetComment = "Google DNS" # Get Rules for network FirewallRules = dashboard.appliance.getNetworkApplianceFirewallL3FirewallRules(network_id) # Determine idx where rule should be updated target_idx = next((idx for idx, item in enumerate(FirewallRules['rules']) if item['comment'] == TargetComment), None) # Update rule FirewallRules['rules'][target_idx].update({ "comment": TargetComment "policy": "deny", "protocol": "any", "destPort": "any", "destCidr": "192.200.1.0/24", "srcPort": "Any", "srcCidr": "Any", "syslogEnabled": false }) # Remove Default Rule entry FirewallRules['rules'].pop(-1) # Update Rules NewSetOfRules = dashboard.appliance.updateNetworkApplianceFirewallL3FirewallRules( networkId=network_id, rules=FirewallRules['rules'] ) What happens is, that I search through all the elements in FirewallRules for the index of the element with the comment, of the rule I wan't to update. With the index in hand, I can either update the rule, or use the index to inject a new rule. In the above example I use it to update a specific rule. Modify it to suit your implementation.

rhbirkelund · ‎Feb 6 2023

The Single Pane of Glass management is still possible with CW916x AP. As long as it's in the Meraki persona, it will function like any other Meraki MR Access Point.

rhbirkelund · ‎Feb 5 2023

In terms of List Price the difference between the two options are about double. The price your retailers/partners has quoted, may differ. So it really comes down to if you think Wifi6E is worth double the pricetag or not. WiFI6E (6GHz) is still rather new, so the mass of devices supporting 6GHz isn't really that big yet. However, Apple has just released their new Macbook M2 which supports 6 GHz, as well as their iPad Pro which also aupport 6GHz, so it is on it's way.

rhbirkelund · ‎Feb 5 2023

Just to clarify a specific detail of what @Ryan_Miles is pointing out regarding persona, as he says the Catalyst persona and the Meraki persona is the exact same hardware, yes. It is possible to convert the AP between different personas, so incase you are shipped a Catalyst person CW9166, you can convert it to a Meraki persona. It is a bit of a hassle to convert, and the easiest would be of course to order it in the correct persona.

rhbirkelund · ‎Jan 30 2023

Honestly, I find it kind of sad, that Cisco TAC has to refer a customer to Meraki Community, for answers on compatibility of Cisco Classic Wireless LAN infrastructure and Meraki security appliances..

rhbirkelund · ‎Jan 29 2023

Assuming that you only have 1 uplink (WAN1) on your MX at the moment, what you could do is gather the IP configuration of your new ISP, and configure it on your WAN2 interface. Then when time comes, where you'll be moving the infrastructure to the new building, simply connect your new ISP to WAN2, and you should be up and running quickly.

rhbirkelund · ‎Jan 29 2023

Could it be that one of the devices have a static IP address configured?

rhbirkelund · ‎Jan 27 2023

While these aren't exactly Visio Stencils, but merely a set of images, I've found that they still work in a pinch. It's also by far the most extensible collection I've found of the Meraki icons. https://meraki.cisco.com/product-collateral/cisco-meraki-topology-icons/

About rhbirkelund

rhbirkelund

Community Record

Badges