Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About GaryShainberg
GaryShainberg
Building a reputation
Member since Aug 24, 2017
Jun 9 2024
Gary Shainberg
Helston, Cornwall
Community Record
150
Posts
132
Kudos
2
Solutions
Badges
Apr 8 2020
9:09 AM
Then I would use group policies, once a user has connected to an SSID, assign the policy and then every-time that device connects the policy will control wheat they can do and where. they can go
... View more
Apr 8 2020
8:40 AM
@RVilhelmsen why would a user, that has an active connection to network A SSID then try and connect to the second SSID also how would you having them authenticate on the second ssid ?
... View more
Apr 8 2020
7:40 AM
Hi there, As you are probably aware, you can not bond 4G/LTE with MLPPP because of many issues but there are a couple of ways you can make it look like you are doing it, with the same results. Firstly check out SharedBand http://sharedband.com/ I have used this solution a number of times in some tricky and high profile solutions where I have had some, but poor ADSL and used 4G to boost the bandwidth. Also you can have a look at PepLink, they have a solution called SpeedFusion that also works - this is an expensive way to do it though. I think you can also use LiveU, even though their solution is designed for the broadcast industry
... View more
Apr 7 2020
3:01 AM
3 Kudos
So I have just been told that at least in Europe the priority for places is going to the top 1% of Meraki customers which I think is a shame considering there are many of us who have made huge commitments to supporting Meraki both direct and by evanglising the products through my community. I know I am either directly or indirectly responsible for many $100k's of Meraki equipment into SME's and large organisations alike and therefore the Meraki decision makers do not get any exposure to me, or anyone else like me as individuals because we do not represent a high brand value name. If this sounds like I am !@£%% off, its because I am - as the very first Meraki user in Europe, I have committed both my business and time to almost 100% Meraki and other than this amazing community, its actually hard to get any commitment back (now days) unless you turn up with a large order. One could argue that once a large organisation has made their initial commitment and purchase to Meraki, thereafter its a "farming" business exercise, where as committed supporters like many of us here are "hunting" for new clients all the time to turn into new members of the Meraki family Sorry everyone - rant over - I just want a place on the ECMS 2 course, because this helps me grow our business, our clients business and Meraki's business is this to much to ask for ????
... View more
Apr 4 2020
8:09 AM
Friends, I am after a favour is there anyone who can loan a VPN access into the US, I want to watch the Discovery Shark Weekend and its not available in the UK and if I use one of the standard "Hide my IP services" they normally get blocked - my email is gary@shainberg.net if anyone can help. Thanks
... View more
Apr 3 2020
5:22 AM
1 Kudo
I would still love to be able to assign policies to a user, specifically a VPN user as opposed to a device which you cant do until they have connected once and if they connect from different devices you have to make sure you catch the login to assign the policy. 2nd request: To be able to import users for Meraki authentication.
... View more
Apr 3 2020
5:17 AM
1 Kudo
I am the same as @PhilipDAth I am having trouble visualising the set-up to make an informed suggested.
... View more
Apr 3 2020
4:06 AM
2 Kudos
Dear Meraki, In view of the current global lockdown and pending financial restrictions, would it not be possible to move the ECMS2 course on-line, I am sure you have the "slideware" and in view of the Meraki "mantra" of everything in the cloud, sureley we could do 90% of the config and testing via dashboard - they only thing we could not to is "plug and play" ohh and be disruptive in class :-). How about it, I would love to get this done and when this world starts to recover I will probably, like many be either "cash poor, time rich" or "time rich and cash poor" Go on- I know you can do it 🙂
... View more
Apr 3 2020
3:45 AM
I guess you could, but in my case I have lots of 220-8's and no stackable switches so it made sense to do it this way
... View more
Apr 2 2020
9:58 AM
1 Kudo
All, Because of the current climate, I have been asked to build a temporary network that once its up and running, can self-heel as much as possible as once its up and running site access will be very restricted and access will only be allowed should there be no other options. I therefore decided to build a lab over the last couple of days, using the Meraki documentation for High Availability as the basis of the design, even though there is some debate as to the best way to wire a HA pair of MX's (Meraki does only support one way, but there is some debate about this) so I decided to build and test. Here is the network design So as you can see its based on the Meraki HA design with one notable exception, I have used two Netgear switches between each MX and the internet connection, I am sure you can do without these but I felt whilst it does bring in some additional points of failure, it allowed me to do some tests. I still have the big issue that in the UK unless you purchase a fixed, symmetrical service it is very hard to get an ISP to offer you multihomed internet connections with multiple IP's , especially if you have a DSL connection. That said, I tried this solution other than the core distribution switch, if any single bit of hardware fails the network lost between 3 and 10 packets but stayed up and running or if either of the Internet connections failed the same happened. What I would love, but have no idea exists is a micro POE switch that supports 2 in and one and fulll STP then you could use two distribution switches, connect them to this gizmo and then your end point connects to the one out (I hope this makes sense) and then if one distribution switch fails, the device will still remain working, this would give total network redundancy. Here is a picture of my lab BTW
... View more
Dec 20 2019
10:45 PM
1 Kudo
Once you enable vlans on the MX by default you will get vlan 1 which is the admin vlan and then you would create the rest. So at the minimum you would create 2 vLAN 1 - all your network vLAN 2 - SONOS That would keep it simple But I would consider separating your core traffic away from vlan1 as you have turned on vlans anyway, all you will need to do is understand the difference between trunk ports - ports who forward all vlans and access ports - ports who only forward traffic from one vlan. So you would always make sure you uplink ports and AP ports are always set as trunk ports, where as a port that is just connected to a PC direct, would be set as an access port. feel free to ping me when you are free either over the weekend or after the holidays.
... View more
Dec 20 2019
9:42 PM
1 Kudo
cool First thing you need to do is on the MX go to Address and vLans And tick the use vlan box, then add vlan - just follow your nose for this. Make sure you click on save. Once this is done, by default DHCP will also be enabled Then in your Wireless settings for the SSID you have created under vlan tagging make sure you have the vlan you added here. That should be it. where in the world are you ?
... View more
Dec 20 2019
9:36 PM
1 Kudo
Sure, but not now as its 05:30 in the UK and I have a a little insomnia 🙂 What firewall / router are you using ?
... View more
Dec 20 2019
9:34 PM
Our posts crossed in the air: Have you created the vlan in your MX (or other router or Layer 3 switch) if not you will have to and then make sure each vlan has DHCP enabled.
... View more
Dec 20 2019
9:31 PM
Hi there, I sounds like you have discovered you mistake, just because you have created 2 SSID's it does not mean the traffic will be either isolated or blocked from each one. I have done this a few times know with SONOS's for the same reasons. Just create 2 vLANs as an eg: vLAN10 - Main Network (192.168.10.0/24) vLAN20 - SONOS (192.168.20.0/24) Then put your main essid in vLAN10 (wireless:access control:vLAN tagging) Put your SONOS in vLAN20 And it should all work Note - its good practice not to put all your network devices in vLAN1 other than for the management of core devices (eg MX/MS/MR) so remember to also move any fixed devices using the switch port settings to vLAN10 as well. Hope this helps
... View more
Nov 6 2019
6:42 AM
Looks like it is working again - guess the big engineer in the sky fixed it 🙂
... View more
Nov 6 2019
4:19 AM
HI there, Having just completed both the SNSA and SNSP courses, one of the things that was highlighted was to make sure only one end of the site has keep-alives active, unfortunately on the Meraki side there is no keep-alive option so you must make sure this is enabled on the Sonicwall side, also you might find playing with the MTU may also work.
... View more
Nov 6 2019
2:51 AM
Has anyone else noticed that there appears to be some issues with MX's and the dashboard, I have multiple MX's on multiple networks in multiple organisations and they are all having issues with showing the MX ports and DHCP data - anyone else seeing this or is it just me that has network gremlins !!!
... View more
Oct 11 2019
1:14 AM
Guys Thanks and I am playing with PagerDuty and using WebHooks, but this is still with the 5 min limitation - I looked at Auvik but could not get it working, although it does look like it could work well. I may have to persevere.....
... View more
Oct 11 2019
1:11 AM
Hi there, The issue for us was that we where faced with a "curved ball" that the ISP who said they would deliver the service on an ethernet (RJ45) presentation but delivered on fibre (LC) which was also single-mode and all we had was the ability to loan a single-mode SPF adaptor, so we had to JFDI with what we had. In the real world and with planning we would have taken a media converter (which I hate, as its another PoF) and used this, but again - and a lesson - if we had been told by the ISP that they would be presenting the service to us on fibre, we would have taken a multi-mode media adaptor as this is the standard for in prem-infrastructure, so we would have still be screwed .......... Its all about setting expectations !!!
... View more
Oct 7 2019
8:52 AM
All, Has anyone had any success in getting our friends at Meraki to reduce the network alert times to less that 5 mins, which is the miinimum the systems allows ? Thanks -Gary
... View more
Oct 7 2019
8:43 AM
1 Kudo
@DOM360 All you need to do is create a vlan, say vlan 999 and give it the /29 or /30 subnet you get from your ISP and then put one of the sfp ports (say 26) nand one of the LAN ports (say 24) in this subnet as access ports then just plug the ISP fibre connection into the sfp port (26) and then connected the LAN port (24) to your WAN port of the MX and thats it - you are now just using ports 24 and 26 as a simple media converter. One point to remember though, you have added a new single point of failure - the switch, but unfortunately is "hobson's choice" Hope this helps
... View more
Sep 30 2019
1:05 PM
@BlakeRichardson thats what I wanted to do and am using Evernote for now but open to suggestions for a better solution
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 22356 | Aug 27 2020 7:54 AM | |
| 4919 | May 23 2020 9:19 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 8 | 2796 | |
| 7 | 22356 | |
| 4 | 28001 | |
| 4 | 39308 | |
| 4 | 3603 |
© 2024 Cisco Systems, Inc.
