About rymiles

rymiles

Meraki switches? Assume all links are trunks? Does the trunk config match on each end MX and switch (the native and allowed VLANs)? In a normal state half of these links should be in STP blocking mode. Is that what you see? Is the event log showing loop detected, MX to switch link port flaps, etc? Is the MX pair showing VRRP transitions?

rymiles

@rajiw017 I was able to do it via Postman. I first tried with the bare minimum value of just the psk. It gave the "Authentication mode is not a valid SSID override option" error. I then added " "authMode": "psk" and the error changed to "Pre-shared key mode requires a valid encryption mode". So, last I added ""encryptionMode": "wpa" and that allowed the PUT to work.

rymiles

The error sounds like you're trying to change the auth type and not just the PSK. What exactly are you sending in the API call? Can you paste it here (minus a PSK for privacy)?

rymiles

Yeah, create the allow rules then throw a broader deny at the bottom https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior

rymiles

The default is allow between autovpn spokes. So, you wouldn't need allow rules unless you had a deny rule in place. What's your intended outcome here?

rymiles

ah, i never bothered to look into why it does that. some articles simply say to hard set the speed on the adapter. so maybe that's the only way to "disable" eee.

rymiles

Whoever you got it from needs to unclaim it from their dashboard

rymiles

Try whitelisting the URL or IP https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/URL_Filtering

rymiles

An easy way is go to Organization > Overview. Go to devices tab, you can filter on MX to parse the results, make sure Uplink IP port 1 (and 2 if you use them) are selected. That will show the public IP. You can export this into csv.

rymiles

Feel free to PM the serial number of the MX and I'll take a look at it

rymiles

Not sure what AP mode on a Netgear means. You want it to just bridge the traffic. Is the AP doing some NAT function for clients that connect to it?

rymiles

what happens if you connect a host directly to port 4? does it receive a DHCP IP? does the NVR on port 3/VLAN 100 work ok?

rymiles

Brandon is correct. I'd just point out the SKU you mentioned is the MR advanced license that adds in the native Umbrella policies. This also requires the org runs per device licensing. You perhaps want the standard enterprise MR licenses which are LIC-ENT-xYR

rymiles

because another renewal claim was done after. the second renewal (ending is 2CF4) didn't include a MS225-48FP and therefore it got eliminated. this looks like the wrong process was followed when claiming licenses. you'll need to open a support case and see if they can help fix your licensing.

rymiles

Is the netgear getting that 10.10.11.2 via DHCP or did you set it as a static? And the MX shouldn't need a reboot, but have you tried rebooting it? Btw, what model MX and what firmware is it running?

rymiles

How are clients connected to this MX? Directly on a LAN port, downstream via switch or AP? You've done a DHCP renew or reboot of the client being tested? If you've changed the VLANs on the MX and saved the config it shouldn't be handing out 192.168.128.0 IP's anymore.

rymiles

#1 I believe we can create reports that span up to 180 days #2 Is noted at the bottom of this table https://documentation.meraki.com/General_Administration/Privacy_and_Security/Cloud_Data_Retention_Policies#Data_Retention_Times

rymiles

Devices turning on & off will result in events like that. Normal behavior when the ports are connected to PC's and such. I would only be concerned if I saw STP flaps on ports going to other infrastructure devices like switches, firewall, routers, etc. Links that shouldn't be bouncing short of device failure or reboot. Also, port 17 connected to the iMac is toggling between 100Mbps and 1Gbps. I've seen this behavior on my wired Macs and often I hard set the port to 1Gbps to stabilize it.

rymiles

You should be able to use the CVR-QSFP-SFP10G adapter to use a 10Gbps transceiver in a 40Gbps port on the 450 https://tmgmatrix.cisco.com/?npid=2301

rymiles

Give this a look. It might deliver what you need. https://workspace.google.com/marketplace/app/meraki_tools/11340767263

rymiles

Orderable now

rymiles

In the interest of stability it's ideal to create the LACP config with the redundant links disconnected or disabled (the ones currently in STP block mode). But you can create the LACP config in your current state. Just be aware there may be a brief blip as it transitions from blocking to forwarding on each end.

rymiles

It will switch to a non region specific SKU on Nov 30. So, it will just be MA-INJ-4. And you'd then add the region specific power cord. In your case that would be MA-PWR-CORD-EU. You should be able to still order the MA-INJ-4-EU until Nov 30.

rymiles

Here's the complete JSON I'm sending when I do an update to the RF profile and set min data rates on 4 SSID's. { "name": "***RYAN TEST***", "bandSelectionType": "ap", "clientBalancingEnabled": "true", "minBitrateType": "ssid", "apBandSettings": { "bandOperationMode": "dual", "bandSteeringEnabled": "true" }, "twoFourGhzSettings": { "maxPower": "11", "minPower": "8", "minBitrate": "12", "validAutoChannels": [ "1", "6", "11" ], "axEnabled": "true" }, "fiveGhzSettings": { "maxPower": "14", "minPower": "8", "minBitrate": "18", "validAutoChannels": [ "36", "40" ], "channelWidth": "auto" }, "perSsidSettings": { "0": { "name": "meraki-cameras2", "minBitrate": 11, "bandOperationMode": "dual", "bandSteeringEnabled": true }, "1": { "name": "meraki-camera", "minBitrate": 24, "bandOperationMode": "dual", "bandSteeringEnabled": true }, "2": { "name": "meraki-camera", "minBitrate": 36, "bandOperationMode": "dual", "bandSteeringEnabled": true }, "3": { "name": "meraki-camera", "minBitrate": 54, "bandOperationMode": "dual", "bandSteeringEnabled": true } } }

rymiles

Setting different min bit rates for multiple SSID's is working for me. In your put you're adding the relevant SSID number beyond just "0" yes?

rymiles

Ryan Miles

Community Record

Badges