Meraki

Ryan_Miles · ‎Nov 26 2021

Is there a default route in EIGRP or BGP that should be distributed via OSPF? I would typically expect to see default-information originate in the OSPF section to propagate the default route.

Ryan_Miles · ‎Nov 25 2021

what is the ospf config of the routers?

Ryan_Miles · ‎Nov 24 2021

a factory reset/paperclip poke puts the ports back to default LAN modes or connect to lan 2 port, access local status page, and uncheck safe mode. you can connect a laptop directly to port 2 or even via a VLAN like through a switch or AP.

Ryan_Miles · ‎Nov 24 2021

this video does a good job of covering the basics to get started with postman and meraki api https://www.youtube.com/watch?v=TRhT-zNVlCw

Ryan_Miles · ‎Nov 24 2021

that doc is out of date. the mr44 is supported with secureconnect.i've requested the doc to be updated. if it's not working a support case should be opened.

Ryan_Miles · ‎Nov 23 2021

It's due to MDNS https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Rename_a_Client's_Hostname. Unfortunately anything that sends MDNS (mostly Macs, but other OS'es can too) the name will show up as the long MDNS string.

Ryan_Miles · ‎Nov 23 2021

Can you PM me the case number?

Ryan_Miles · ‎Nov 23 2021

Can the splash page be replicated in the native splash function of dashboard? That would greatly simplify your design, provide resiliency, and require no VPN tunnel.

Ryan_Miles · ‎Nov 23 2021

I'd open a Support case. I have 16 MT's here connected to MR56's and MR46's since fall 2020 without issue. I'm also not aware of any systemic issues with MT and MR46.

Ryan_Miles · ‎Nov 22 2021

on which switch? i see plenty of those events in your log for various ports connecting to workstations, printers, etc. all normal behavior. i'm not seeing these happen on ports connected to ap's. also most of your ap's say they're having trouble communicating with the cloud. make sure the proper IPs and ports are allowed from the AP's. upper right of dashboard help > firewall info.

Ryan_Miles · ‎Nov 22 2021

Please open a Support case so they can engage Eng if needed

Ryan_Miles · ‎Nov 22 2021

i think your switch ACL rule #1 is the problem

Ryan_Miles · ‎Nov 22 2021

There are less expensive gig and multigig MX's. The MX75/85/95/105. The MX100 is old and end of sale anyway. As for load balancing across two MX64's you need to have them both with active licenses (not HA pair) and there would need to be an intelligent downstream device sending traffic to each MX. Your best best here is get a MX75 and call it good. Or, even go lower to a MX67 which is rated for 450Mbps and you're getting most of what your internet connection provides.

Ryan_Miles · ‎Nov 22 2021

The mgmt port is just for local connection with a laptop as you mentioned if you need to give it a static in order for it to reach dashboard. Otherwise the switch will pull DHCP for its logical mgmt interface which is the common way folks deploy Meraki switches (and APs, cameras, etc).

Ryan_Miles · ‎Nov 22 2021

Which SSID is having the problem? Looking at your org I see 4 SSID's all using IPSK. In most cases the configured IPSK groups are bound to Group Policies that assign VLANs. However, I don't find most of those VLANs on the MX or MS as L3 interfaces or DHCP. Example, your first SSID maps 3 IPSK groups to Catering, Staff, and Students GP's. Those GP's are configured to place clients on VLANs 211, 201, 101. But I don't see any of those VLANs on the MX or MS's?

Ryan_Miles · ‎Nov 21 2021

are you using templates?

Ryan_Miles · ‎Nov 19 2021

@rajiw017 I was able to do it via Postman. I first tried with the bare minimum value of just the psk. It gave the "Authentication mode is not a valid SSID override option" error. I then added " "authMode": "psk" and the error changed to "Pre-shared key mode requires a valid encryption mode". So, last I added ""encryptionMode": "wpa" and that allowed the PUT to work.

Ryan_Miles · ‎Nov 18 2021

The error sounds like you're trying to change the auth type and not just the PSK. What exactly are you sending in the API call? Can you paste it here (minus a PSK for privacy)?

Ryan_Miles · ‎Nov 18 2021

Yeah, create the allow rules then throw a broader deny at the bottom https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior

Ryan_Miles · ‎Nov 18 2021

The default is allow between autovpn spokes. So, you wouldn't need allow rules unless you had a deny rule in place. What's your intended outcome here?

Ryan_Miles · ‎Nov 18 2021

ah, i never bothered to look into why it does that. some articles simply say to hard set the speed on the adapter. so maybe that's the only way to "disable" eee.

Ryan_Miles · ‎Nov 17 2021

Try whitelisting the URL or IP https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/URL_Filtering

Ryan_Miles · ‎Nov 17 2021

An easy way is go to Organization > Overview. Go to devices tab, you can filter on MX to parse the results, make sure Uplink IP port 1 (and 2 if you use them) are selected. That will show the public IP. You can export this into csv.

Ryan_Miles · ‎Nov 17 2021

Feel free to PM the serial number of the MX and I'll take a look at it

Ryan_Miles · ‎Nov 17 2021

Not sure what AP mode on a Netgear means. You want it to just bridge the traffic. Is the AP doing some NAT function for clients that connect to it?

About Ryan_Miles

Ryan_Miles

Ryan Miles

Community Record

Badges