About Ryan_Miles

Ryan_Miles · ‎11-21-2021

are you using templates?

Ryan_Miles · ‎11-21-2021

This topology is pretty typical and shouldn’t be producing loops unless you have a bad cable, transceiver, config, or software bug.

Ryan_Miles · ‎11-21-2021

Meraki switches? Assume all links are trunks? Does the trunk config match on each end MX and switch (the native and allowed VLANs)? In a normal state half of these links should be in STP blocking mode. Is that what you see? Is the event log showing loop detected, MX to switch link port flaps, etc? Is the MX pair showing VRRP transitions?

Ryan_Miles · ‎11-19-2021

@rajiw017 I was able to do it via Postman. I first tried with the bare minimum value of just the psk. It gave the "Authentication mode is not a valid SSID override option" error. I then added " "authMode": "psk" and the error changed to "Pre-shared key mode requires a valid encryption mode". So, last I added ""encryptionMode": "wpa" and that allowed the PUT to work.

Ryan_Miles · ‎11-18-2021

The error sounds like you're trying to change the auth type and not just the PSK. What exactly are you sending in the API call? Can you paste it here (minus a PSK for privacy)?

Ryan_Miles · ‎11-18-2021

Yeah, create the allow rules then throw a broader deny at the bottom https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior

Ryan_Miles · ‎11-18-2021

The default is allow between autovpn spokes. So, you wouldn't need allow rules unless you had a deny rule in place. What's your intended outcome here?

Ryan_Miles · ‎11-18-2021

ah, i never bothered to look into why it does that. some articles simply say to hard set the speed on the adapter. so maybe that's the only way to "disable" eee.

Ryan_Miles · ‎11-18-2021

Whoever you got it from needs to unclaim it from their dashboard

Ryan_Miles · ‎11-17-2021

Try whitelisting the URL or IP https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/URL_Filtering

Ryan_Miles · ‎11-17-2021

An easy way is go to Organization > Overview. Go to devices tab, you can filter on MX to parse the results, make sure Uplink IP port 1 (and 2 if you use them) are selected. That will show the public IP. You can export this into csv.

Ryan_Miles · ‎11-17-2021

Feel free to PM the serial number of the MX and I'll take a look at it

Ryan_Miles · ‎11-17-2021

Not sure what AP mode on a Netgear means. You want it to just bridge the traffic. Is the AP doing some NAT function for clients that connect to it?

Ryan_Miles · ‎11-17-2021

what happens if you connect a host directly to port 4? does it receive a DHCP IP? does the NVR on port 3/VLAN 100 work ok?

Ryan_Miles · ‎11-17-2021

Brandon is correct. I'd just point out the SKU you mentioned is the MR advanced license that adds in the native Umbrella policies. This also requires the org runs per device licensing. You perhaps want the standard enterprise MR licenses which are LIC-ENT-xYR

Ryan_Miles · ‎11-17-2021

because another renewal claim was done after. the second renewal (ending is 2CF4) didn't include a MS225-48FP and therefore it got eliminated. this looks like the wrong process was followed when claiming licenses. you'll need to open a support case and see if they can help fix your licensing.

Ryan_Miles · ‎11-17-2021

Is the netgear getting that 10.10.11.2 via DHCP or did you set it as a static? And the MX shouldn't need a reboot, but have you tried rebooting it? Btw, what model MX and what firmware is it running?

Ryan_Miles · ‎11-17-2021

How are clients connected to this MX? Directly on a LAN port, downstream via switch or AP? You've done a DHCP renew or reboot of the client being tested? If you've changed the VLANs on the MX and saved the config it shouldn't be handing out 192.168.128.0 IP's anymore.

Ryan_Miles · ‎11-17-2021

#1 I believe we can create reports that span up to 180 days #2 Is noted at the bottom of this table https://documentation.meraki.com/General_Administration/Privacy_and_Security/Cloud_Data_Retention_Policies#Data_Retention_Times

Ryan_Miles · ‎11-17-2021

Devices turning on & off will result in events like that. Normal behavior when the ports are connected to PC's and such. I would only be concerned if I saw STP flaps on ports going to other infrastructure devices like switches, firewall, routers, etc. Links that shouldn't be bouncing short of device failure or reboot. Also, port 17 connected to the iMac is toggling between 100Mbps and 1Gbps. I've seen this behavior on my wired Macs and often I hard set the port to 1Gbps to stabilize it.

Ryan_Miles · ‎11-17-2021

You should be able to use the CVR-QSFP-SFP10G adapter to use a 10Gbps transceiver in a 40Gbps port on the 450 https://tmgmatrix.cisco.com/?npid=2301

Ryan_Miles · ‎11-16-2021

Give this a look. It might deliver what you need. https://workspace.google.com/marketplace/app/meraki_tools/11340767263

Ryan_Miles · ‎11-16-2021

Orderable now

Ryan_Miles · ‎11-16-2021

In the interest of stability it's ideal to create the LACP config with the redundant links disconnected or disabled (the ones currently in STP block mode). But you can create the LACP config in your current state. Just be aware there may be a brief blip as it transitions from blocking to forwarding on each end.

Ryan_Miles · ‎11-16-2021

It will switch to a non region specific SKU on Nov 30. So, it will just be MA-INJ-4. And you'd then add the region specific power cord. In your case that would be MA-PWR-CORD-EU. You should be able to still order the MA-INJ-4-EU until Nov 30.

Ryan_Miles

Ryan Miles

Community Record

Badges