Meraki

Greenberet · ‎Nov 25 2020

t0 and t1 are timestamps which look like this: t0=2020-11-24T18:00:00Z&t1=2020-11-24T18:04:00Z timespan is a number in seconds -> 5 minutes = 300, 2 minutes = 120. 5 minutes is also the maximum you can specify here. to use the default values for uplink/ip just don't specify these parameters.

Greenberet · ‎Nov 25 2020

yeah I had similiar scripts (but mostly I've changed the name directly in the code). Especially for networks and co. That's why I've created the script above =D

Greenberet · ‎Nov 24 2020

Hello, I guess many of you have a similiar problem as me: My scripts are often targeting a specific organization/network. The problem here is, that you first have to fine out what the id really is. My previous approach was often like this: Either I've used the developer.cisco.com feature to run the endpoints (e.g. getOrganizations) in the browser or you are just printing every value in the script to get the correct one. To solve that I wrote a script which will print every name/description of an organization, network, device, client or bluetooth client based on a given input pattern powered by regular expressions. usage: id_finder.py [-h] -p PATTERN [-s OPTIONS] [-o ORGANIZATION [ORGANIZATION ...]] [-n NETWORKS [NETWORKS ...]] This scripts helps to find the id of an organization, network, device or (bluetooth) client optional arguments: -h, --help show this help message and exit -p PATTERN, --pattern PATTERN the regular expression to search for (default: None) -s OPTIONS, --search_options OPTIONS specifies which objects should be looked up: o=organizations, n=networks, d=devices, c=clients, b=bluetooth clients (default: ond) -o ORGANIZATION [ORGANIZATION ...], --organization ORGANIZATION [ORGANIZATION ...] The name/id of the organizations under which you want to limit the search. This makes the o option of -s obsolete. (default: None) -n NETWORKS [NETWORKS ...], --network NETWORKS [NETWORKS ...] the name/id of the networks under which you want to limit the search. This makes the n option of -s obsolete. (default: None) By default it will only search in the organization-, network- or device name. To match also clients/bluetooth clients you have to specify the -s parameter example output running id_finder.py -p .* -o Home -s ondcb Critics and comments are welcome 😃

Greenberet · ‎Nov 17 2020

It's me Greenberet =D

Greenberet · ‎Nov 17 2020

try double slashes in the path -> "C:\\certfolder\\certificate.cer"

Greenberet · ‎Nov 15 2020

Nice Idea. I have a few comments about the implementation of the script: Use only one session object and pass it as parameter instead of the apikey. At the moment you are generating for each request a new session object which generates a higher load on your script and on the meraki backend span argument: add the default parameter. That way you won't have to check, if it got provided or not. Just use it 😃 At the moment you are not checking for an invalid input on the parameters, so your code might fail. Try something like this: try: variables = var_parser.parse_args() except SystemExit: return except: print("could not parse arguments") var_parser.print_help() return don't check for the api_key. The DashboardAPI object will do this for you. Just catch the APIKeyError exception. in getnbevents you don't have to count the entries, just do return len(log['events']) return len(log['events'])

Greenberet · ‎Nov 9 2020

you have to extract the information from the network type. @chengineerhas created a backup script which is using a method for this

Greenberet · ‎Nov 3 2020

Congratulations to the winners! It was a fun event =D. Sadly that our group of 4 ended in a group of 2 during the event. I'm still curious about one question (I'm not fighting the results, I just want to know "the truth" =D) "How many meraki offices do exist and name them for extra points?" The answer was 6 (and I forgot the names). However https://meraki.cisco.com/about/ -> "Global offices in 7 countries" And then the job offers for meraki (I'm just listing the offers with a specific city): San Francisco San Jose Austin Chicago Tokyo London Sydney Mexico City Brisbane

Greenberet · ‎Nov 3 2020

Hello, as bruce said its possible via the dashboard api. Don't worry about the other parameters. It's enough to specify the fields you want to change. I've done something similiar with an automation and device tracking (turn on the phone (swithport), when I'm home and turn it off as soon as I leave) path: devices/{serial}/switch/ports/{portId} payload: {"enabled": "true" }

Greenberet · ‎Oct 28 2020

you should take a look at the meraki python library. It is easier to use than using standard requests and it will take care about all throttling limits, pagination, ....

Greenberet · ‎Oct 13 2020

Hello, I wrote a small script which will generate QRCodes for configured SSIDs. The script is using asyncio and api version 1. usage: generate_qrcodes.py [-h] [-o ORGANIZATION] [-n NETWORKS [NETWORKS ...]] [-s SSIDS [SSIDS ...]] Generates QRCodes from Meraki wireless networks optional arguments: -h, --help show this help message and exit -o ORGANIZATION, --organization ORGANIZATION the name/id of the organization -n NETWORKS [NETWORKS ...], --network NETWORKS [NETWORKS ...] the name/id of the networks to generate the qr codes from. If you are providing this parameter, then you must provide the organization. -s SSIDS [SSIDS ...], --ssid SSIDS [SSIDS ...] the name of the ssids to generate the qr codes You have to provide at least the organization or network parameter. the QRCodes will be places in a subdirectory "img". The Filename is {NetworkName}_{SSID}.png. Example: Demo Wifi Code

Greenberet · ‎Aug 22 2020

* We are looking for a radio station. Switch Eddie's geographic location (address). Broadcasting House, Peel Wing, Portland Pl, London W1A 1AA, United Kingdom * We are looking for a date. Have a look at VLAN 1525 in the MX. It'll provide hints. 25 May * We're looking for a well known attack used by hackers. A hint can be found in the raspberrypi client's notes. Phishing * We're looking for a motto, and even a rule. Don't ... SSID 15's name says the rest. Don't Panic * This question can be found on the splash page settings for the same SSID. What is the answer to the ultimate question of life the universe and everything? - 42 * We're looking for one of my favorite characters. The Total Perspective Vortex MV camera's tags are all hints. Marvin the paranoid android * We're looking for some kind of big calculator. Port 6 on switch Eddie links up to it. Deep Thought * We're looking for the artist of a song. You'll need to use the snapshot API to know which one. Make a snapshot of the Total Perspective Vortex camera. I shone some light at the exact timestamp of 18/08/2020 16:12:00 Belgian time (Note that Belgian time is at +02:00 at the moment). If your timestamp is correct, you'll see the title of a song that's also the name of a spaceship, if not you'll see only darkness. Artist: Neil Young Title/Spaceship: Heart of Gold * Who is informed when someone violates their geofencing policy? arthur.dent@human.from.earth * By now the central theme of the questions should be clear. But the next question isn’t: oaniemmsbuhpvzkbzptgsilyzskjoticnmk? It's Vigenère encoded, the keyword for deciphering it can be found in a pointless MX L3 firewall rule. Douglas Adams

Greenberet · ‎Aug 13 2020

yes exactly =D you must have a valid license state, which you can also get with the 1d version 😃

Greenberet · ‎Aug 13 2020

@BrandonS currently I have 1 mx, 1 mr, 1 ms and 2 mv in my cmna org. I want to add 1 or 2 additional ap. For these 3 devices I need valid licenses, which I currently don't have. List price for 1D is between 0.5$ - 2.5$ List prive for 1Y is about 300$ So its about 900$ vs 7$ in terms of purchase =D

Greenberet · ‎Aug 13 2020

@Roska I've created an licensing case for this. The one day licenses are valid here 😃 "I know that I have to stay under the 12 license limit to get the free auto-renewal. Would it be enough to by the 1 day licenses for the new gear as I'm in co-termination to have a valid license state, or do I have to buy the 1 year licenses?" Reply: "Thank you for contacting Cisco Meraki Support! If you purchase a 1 Year License Key, it will affect your co-termination date greatly. However, you can do so and still qualify for the Auto-Renewal."

Greenberet · ‎Aug 8 2020

Thank you very much 😃 and congratulations to the others =D

Greenberet · ‎Aug 5 2020

I know that the license itself would be only active for one day, but I'm still on the co-term model and not on per device. So theoretically the 1 day licenses should extend the license for the whole dashboard for a few hours / 1 day and therefore work.

Greenberet · ‎Aug 5 2020

Hello, I want to follow up to this question, because I will be in a similar situation in about 6 months. I would by everything with NFR, but would the 1 day licenses be enough for this(they are about 0.5$-2$) or do we have to buy at least the 1YR licenses? Thanks =D

Greenberet · ‎Jul 28 2020

@CptnCrnch Sadly no =( There is currently no api command to send wol requests

Greenberet · ‎Jul 8 2020

@CptnCrnch in the future it will also be easier. I've just started it, but I'm writing an integration for meraki. Starting with switchports and a simple camera interface

Greenberet · ‎Jul 8 2020

Hello, I thought I should share this unusual mini project =D. First of all, the bathroom camera is not designed for what you might think! Story Time We had two dwarf rabbits and one has died recently. So the other rabbit was now alone and we had to get a new partner for her. For the socialization you have to find a neutral territory for both rabbits. The only possible room in our flat is the bathroom. There was no other choice to place them there. The problem with the rabbits is, that they are like kids. As long as you are sitting next to them and they can see you watching...they won't do anything "bad" e.g. bloody fights. We wanted to keep an eye on them without them knowing. So I've decided to install one of the meraki cameras here =D. And thanks to the IR LEDs this is working also in the night. Used components CMNA Gear Internet & Wifi Access MV72X Low Voltage Power Adapter Raspberry PI with Home Assistant Installation The installation was pretty simple. As it was designed for a temporary solution, I've placed the camera on the top of the mirror which has a small storage behind it. There is enough space for the camera on the top to stand save. I didn't want to drill any holes in the wall or to lay a network cable from the bathroom to the next switch. Thanks to WiFi this isn't needed. In case of needed privacy, there is always the option to just unplug the power adapter of the camera next to the mirror. IR Problems In the beginning I've kept the protection dome on the camera, which was working fine with a normal light, but with activated IR you wouldn't see a thing What looks like eyelashes here are actually the lights of the mirror. Even with the removed dome you were not able to see a thing in the room as the mirror light was reflecting all the IR light back to the camera, so I had to remove the mirror light. (P.S. I've removed already the dust) After that the bunnys were safe to watch =D Home Assistant Home-Assistant is an open source product for smart home automation which can integrate a lot of smart devices. As of writing this article it has 1615 integrations e.g. Amazon Alexa, Google Assistant, Google Cast, MQTT, IP Cameras and so on. I've needed a simple and secure method for my girlfriend to watch the rabbits via mobile. Both meraki apps (released and beta) were to complicated here and the fullscreen mode of the video is also not the best one in the apps. The dashboard would involve to many clicks after the login process to even get to the live video. Not to mention that I would have to setup a new camera only administrator and let her run through the account creation process. Since I had already home assistant running for my smart home it was an easy task to implement it in a few steps. enable RTSP on the camera configure the camera component in home assistant camera: - platform: generic name: Rabbits still_image_url: https://<url to a static image> stream_source: rtsp://<device ip>:9000/live restart home assistant After that the live video is just a button press away 😃 The other good thing is, that this solution is working locally (without dashboard/internet access) and from remote.

Greenberet · ‎Jun 30 2020

As @PhilipDAth said I would use a vpn here as port forwards are to unsecure.

Greenberet · ‎Jun 30 2020

I would say it depends on what you want to do in the future. Having active cisco certifications is always a good thing on a job hunt. It might either help on getting a higher salary or to "get the job". If many people are applying for the same job, then HR will sort some people out and active certifications are definitely a big factor here. I'm holding CCNA R&S, CMNA, CCNP Collaboration, CCIE Collaboration, CCDevP certifications and I'm part of the Devnet 500. Job wise I'm primary in the collaboration field.

Greenberet · ‎Jun 26 2020

Hello, you have to create a vlan for that. After the VLAN creation you can assign one or more ports to that vlan.

Greenberet · ‎Jun 13 2020

I would install a small linux server / raspberry pi on the remote site. there is a tool etherwake which will send the WOL packet on the subnet. Depending on the user you can either let him use the server via ssh to wake his machine or just do a simple web server which will invoke the etherwake command.

About Greenberet

Greenberet

Community Record

Badges