Meraki

mlefebvre · ‎Jan 18 2024

It certainly does stand out in comparison to prior firmware, looking at about 80 access points on MR29.5.1 they have collectively used less than 3.5gb of traffic in the last day to those destinations, with the highest AP at about 150mb.

mlefebvre · ‎Jan 18 2024

Looking around in some of my networks and so far this appears normal for an AP on MR30.5

mlefebvre · ‎Jan 12 2024

Then I would get a case open with Meraki support asap, get on the phone with them and have them examine the MX logs while it is happening, they have access to significantly more information than what is presented through the dashboard.

mlefebvre · ‎Jan 12 2024

By any chance do you have Bonjour Forwarding configured in any of those sites?

mlefebvre · ‎Jan 11 2024

Please define what you mean by "impacted"

mlefebvre · ‎Jan 8 2024

What I *could* see is maybe some integration of Broadsoft or Webex Cloud into the Meraki Dashboard since they are going that route for switches and APs, and maybe some of the Cisco MPP style phones getting a Meraki branding/mode that makes them super easy to deploy? It would be convenient, but I'm not sure there is enough of a business case and profit margin for Meraki to go after in this market segment anymore with the prevalence of cellphones and softphones.

mlefebvre · ‎Jan 8 2024

It will happen when it happens, I would rather Meraki take their time with their WiFi 7 lineup and implement a stable, business-grade product than chase a PR stunt from a competitor that wants to launch pre-standard gear

mlefebvre · ‎Dec 29 2023

That is not working the way you think it is working, shaping is applied per-flow, not as a total to the subnets you've included. @MichelRueger fyi that unfortunately what you are asking for is not possible on Meraki at this time.

mlefebvre · ‎Dec 18 2023

You cannot force a client to forget the password, your only option is to change the password on the SSID itself.

mlefebvre · ‎Dec 15 2023

If you are talking about creating iPSKs for each unit, yes that can be done. If you were talking about automating adding clients to a specific iPSK, that is not possible. https://developer.cisco.com/meraki/api-v1/create-network-wireless-ssid-identity-psk/

mlefebvre · ‎Dec 14 2023

I don't have a demo unit next to me at this moment, but looking at the documentation I see uplink | string The WAN uplink used to obtain the requested stats. Valid uplinks are wan1, wan2, wan3, cellular. The default is wan1. I am suspicious that to get the MG stats from this endpoint you may have to specify that the uplink is cellular via this parameter.

mlefebvre · ‎Dec 13 2023

Putting the inventory issue aside, as long as your configuration is correct on the switches and APs yes you should be able to use them cross-org with the exception of some potentially dashboard-specific features like Meraki Auth.

mlefebvre · ‎Dec 12 2023

Please don't.

mlefebvre · ‎Dec 10 2023

This is not correct, I tested it myself on MX18.1 and MR30 firmware and if you have content categories blocked on your MX but with specific URLs allowed in your GPO, those specific URLs are correctly permitted even on a wireless client. The problem is something else.

mlefebvre · ‎Nov 20 2023

after you do >>> import meraki what is the output of >>> dir(meraki) and >>> meraki.__version__ ?

mlefebvre · ‎Nov 15 2023

I consider myself a big fan of additional monitoring capabilities in the Meraki platform, however I am thus far disappointed in this launch. -Advanced Security, and especially Advanced Security + Insight not getting any ThousandEyes entitlement at all? Insight was already a hard sell because of its lack of value, but then to say go buy your own licenses or upgrade all the way to Secure SD WAN +? You are practically selling competitor products for them at this price point. -"Credits" and a limited number of tests makes no sense in the first place when I am running these tests from my own hardware, if I license my hardware for a feature I should be able to use as much of it as the platform will permit.

mlefebvre · ‎Nov 7 2023

"Does anyone have an relevant experience." Yes, and I would heavily recommend against consolidation here.

mlefebvre · ‎Nov 1 2023

"The environment is So large that the throttling implemented to restrict the number of call made against the Dashboard, precludes us from making REST calls to get this state information." There is no way this is possible unless you are not being efficient in the way you are calling the API. "Would using WebHooks to track the uplinkStatus help us out here - would the Down / Up state be available ? " If you have Meraki Insight or the SD-WAN+ MX license, yes it would. Here is an example pair of emails I received from Insight for a WAN status change, the webhook data should be similar. " The primary security appliance in the [REDACTED] network failed over to using uplink Internet 2 because the primary link has become unavailable. It will return to using the primary uplink when it becomes available. There has been 1 failover event detected: At 01:21 AM MST on Jan 18, the security appliance switched to using Internet 2 as its uplink. - Cisco Meraki" and then " The primary security appliance in the [REDACTED] network switched to using its primary uplink, configured to be uplink Internet 1, after a period in which the link was unavailable. There has been 1 failover event detected: At 01:24 AM MST on Jan 18, the security appliance switched to using Internet 1 as its uplink. - Cisco Meraki"

mlefebvre · ‎Nov 1 2023

"access to the portal" is not necessarily "full access", this is very typical of a standardized MSP setup where you receive restricted access to the Meraki dashboard and the rest is for the MSP and you are expected to open tickets with the MSP for issues you can't resolve yourself, this is part of the service you are paying for. Also Meraki will not give you additional dashboard access, this is entirely between you and your MSP.

mlefebvre · ‎Oct 25 2023

Use try/except error handling. In this example, when the first network in the org throws an error in the getNetworkApplianceSecurityIntrusion call, the try/except/break will exit the for device in devices loop, which will then make your code skip to the next organization import meraki import os API = os.environ.get("API_KEY_FF") dashboard = meraki.DashboardAPI(API, suppress_logging=True) to_write = "" organisations = dashboard.organizations.getOrganizations() for organisation in organisations: devices = dashboard.organizations.getOrganizationDevices(organisation["id"], total_pages='all') for device in devices: if "MX" in device["model"]: print(organisation["name"] + "," + device["model"]) try: ASI = dashboard.appliance.getNetworkApplianceSecurityIntrusion(device["networkId"]) except Exception as e: print(str(e)) break for MX in ASI: to_write = to_write + f'{organisation["name"]},{device["networkId"]},{device["name"]},{ASI["mode"]}\n' f = open("Get_ASI_MX.csv", "w") f.write(to_write) f.close()

mlefebvre · ‎Oct 16 2023

You can use this API call to find out which devices have Sense enabled https://developer.cisco.com/meraki/api-v1/get-device-camera-sense/ or if you are forwarding to an MQTT broker, you can look for the serial numbers under the topic /merakimv/{SERIAL} on the broker in the future, I would recommend tagging the devices or networks with something like "mvsense" to make them easier to find.

mlefebvre · ‎Oct 13 2023

When you say you want to integrate them, what exactly do you mean? What do the two systems have to do together to achieve? Also, how many intercoms are we talking about and are they indoor or outdoor? How are the intercoms currently monitored (from a central security desk, etc.), and is there an existing NVR solution either built into the intercoms or separate from them?

mlefebvre · ‎Oct 9 2023

This appears to be following a versioning scheme called Semantic Versioning

mlefebvre · ‎Oct 4 2023

The only thing I will say on this matter is I believe this thread should be deleted in short order and any further perceived issues addressed in DMs if required, a thread like this should not exist on a forum for professionals.

mlefebvre · ‎Oct 1 2023

Yes the MR28 has no scanning radio, but the MR28 gets them 95% feature and API coverage for the best cost. Unless you very specifically need to test with those events I don't think it is worth it if your goal is to develop apps...you are better off using the sandbox for that last few %. Here is how other APs scale up to get that last 5% of features by list price (check with the retailer for actual): MR28 - 95% compatibility with API endpoints and features, $500 list price MR36 (gets you a scanning radio, no additional API coverage) $947 list price MR36H (gets you access to port profiles (one or two additional API endpoints but more situational than other access points) $860 list price CW9162 (gets you 6GHz capabilities, exposes some additional settings in RF profiles specific to 6GHz) $1595 list price

About mlefebvre

mlefebvre

Community Record

Badges