About rymiles

rymiles

that doc is out of date. the mr44 is supported with secureconnect.i've requested the doc to be updated. if it's not working a support case should be opened.

rymiles

It's due to MDNS https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Rename_a_Client's_Hostname. Unfortunately anything that sends MDNS (mostly Macs, but other OS'es can too) the name will show up as the long MDNS string.

rymiles

Can you PM me the case number?

rymiles

Can the splash page be replicated in the native splash function of dashboard? That would greatly simplify your design, provide resiliency, and require no VPN tunnel.

rymiles

I'd open a Support case. I have 16 MT's here connected to MR56's and MR46's since fall 2020 without issue. I'm also not aware of any systemic issues with MT and MR46.

rymiles

on which switch? i see plenty of those events in your log for various ports connecting to workstations, printers, etc. all normal behavior. i'm not seeing these happen on ports connected to ap's. also most of your ap's say they're having trouble communicating with the cloud. make sure the proper IPs and ports are allowed from the AP's. upper right of dashboard help > firewall info.

rymiles

Please open a Support case so they can engage Eng if needed

rymiles

i think your switch ACL rule #1 is the problem

rymiles

There are less expensive gig and multigig MX's. The MX75/85/95/105. The MX100 is old and end of sale anyway. As for load balancing across two MX64's you need to have them both with active licenses (not HA pair) and there would need to be an intelligent downstream device sending traffic to each MX. Your best best here is get a MX75 and call it good. Or, even go lower to a MX67 which is rated for 450Mbps and you're getting most of what your internet connection provides.

rymiles

The mgmt port is just for local connection with a laptop as you mentioned if you need to give it a static in order for it to reach dashboard. Otherwise the switch will pull DHCP for its logical mgmt interface which is the common way folks deploy Meraki switches (and APs, cameras, etc).

rymiles

Which SSID is having the problem? Looking at your org I see 4 SSID's all using IPSK. In most cases the configured IPSK groups are bound to Group Policies that assign VLANs. However, I don't find most of those VLANs on the MX or MS as L3 interfaces or DHCP. Example, your first SSID maps 3 IPSK groups to Catering, Staff, and Students GP's. Those GP's are configured to place clients on VLANs 211, 201, 101. But I don't see any of those VLANs on the MX or MS's?

rymiles

are you using templates?

rymiles

This topology is pretty typical and shouldn’t be producing loops unless you have a bad cable, transceiver, config, or software bug.

rymiles

Meraki switches? Assume all links are trunks? Does the trunk config match on each end MX and switch (the native and allowed VLANs)? In a normal state half of these links should be in STP blocking mode. Is that what you see? Is the event log showing loop detected, MX to switch link port flaps, etc? Is the MX pair showing VRRP transitions?

rymiles

@rajiw017 I was able to do it via Postman. I first tried with the bare minimum value of just the psk. It gave the "Authentication mode is not a valid SSID override option" error. I then added " "authMode": "psk" and the error changed to "Pre-shared key mode requires a valid encryption mode". So, last I added ""encryptionMode": "wpa" and that allowed the PUT to work.

rymiles

The error sounds like you're trying to change the auth type and not just the PSK. What exactly are you sending in the API call? Can you paste it here (minus a PSK for privacy)?

rymiles

Yeah, create the allow rules then throw a broader deny at the bottom https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior

rymiles

The default is allow between autovpn spokes. So, you wouldn't need allow rules unless you had a deny rule in place. What's your intended outcome here?

rymiles

ah, i never bothered to look into why it does that. some articles simply say to hard set the speed on the adapter. so maybe that's the only way to "disable" eee.

rymiles

Whoever you got it from needs to unclaim it from their dashboard

rymiles

Try whitelisting the URL or IP https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/URL_Filtering

rymiles

An easy way is go to Organization > Overview. Go to devices tab, you can filter on MX to parse the results, make sure Uplink IP port 1 (and 2 if you use them) are selected. That will show the public IP. You can export this into csv.

rymiles

Feel free to PM the serial number of the MX and I'll take a look at it

rymiles

Not sure what AP mode on a Netgear means. You want it to just bridge the traffic. Is the AP doing some NAT function for clients that connect to it?

rymiles

what happens if you connect a host directly to port 4? does it receive a DHCP IP? does the NVR on port 3/VLAN 100 work ok?

rymiles

Ryan Miles

Community Record

Badges