Meraki

PhilipDAth · ‎Nov 19 2018

Actually, the easy solution to your problem would be to split your setup into two organizations.

PhilipDAth · ‎Nov 19 2018

You are not going to be able to do that in a single Meraki organisation. Meraki requires all the subnets in any network that have VPN enabled to be unique across the entire Organisation. Even if you could deselect a site it would violate the unique subnet restriction. I have deployed a large number of Meraki networks and these restrictions speed up deployments incredibly, but mean you can't handle the small number of special cases like this. If it was me, I would put in a little ASA 5506 beside the MX at the special site to handle this case.

PhilipDAth · ‎Nov 18 2018

Is there any chance this network already exists, potentially as another type already?

PhilipDAth · ‎Nov 18 2018

Just for the hell of it, try deleting: type':'wireless' And then manually type it back in. I wonder if you have a strange non-printable character in that string.

PhilipDAth · ‎Nov 18 2018

I agree with @jdsilva it is for MESH networking - but I don't believe it can be turned off via the Dashboard.

PhilipDAth · ‎Nov 18 2018

Take a quick look at the documentation: https://dashboard.meraki.com/api_docs#create-a-network You'll first need to send a query to get your Organisation ID. Check out the curl example as well.

PhilipDAth · ‎Nov 18 2018

If you are mounting the switch so the ports face up, how about screwing some 'L' brackets to the wall, then resting the switch rack mount brackets on those, and bolt together?

PhilipDAth · ‎Nov 18 2018

You can use cellular in an HA pair - just the cellular links are the last to be used. Note you can't do "HA NAT" as the cellular interfaces can not share an IP address (the same as your 2900's), but it will still fail over. Any in-progress TCP sessions will be lost and will need to be restarted.

PhilipDAth · ‎Nov 16 2018

Wait, hold on, you sleep? I thought this was a 24x7 job.

PhilipDAth · ‎Nov 15 2018

Does anything appear for NPS in the Windows Security Event log on the NPS server. It will usually say why the request has been denied.

PhilipDAth · ‎Nov 15 2018

If the client sends a broadcast packet then that will go over every uplink, and show this behaviour. The problem will reduce as you get more and more Meraki swtches.

PhilipDAth · ‎Nov 14 2018

This is the list of all officially supported modules. https://meraki.cisco.com/lib/pdf/meraki_datasheet_sfp.pdf SFP-10G-LR-S is hihly likely to work, but is not officially supported. If you run into an issue and support think it may be related to the SFP+ being used they may ask you to replace it with a supported module before continuing to help.

PhilipDAth · ‎Nov 12 2018

@BlakeRichardson do you have a local Cisco partner to look after you? Chris was an exceptional sales person.

PhilipDAth · ‎Nov 12 2018

It does not.

PhilipDAth · ‎Nov 11 2018

The colours meant nothing. Just different people patching at different times with whatever was lying around.

PhilipDAth · ‎Nov 11 2018

Each model of ASA has a hardware limit. Within that you buy AnyConnect licences for the number of users. You can create multiple VPN profiles. One profile could use it, and another not. Here is a comparison of the current lower end models: https://www.cisco.com/c/en/us/products/security/asa-firepower-services/compare-models.html?columnsToShow=7+4+3 Under "Capacity" you'll find the AnyConnect maximum limits.

PhilipDAth · ‎Nov 11 2018

Can't be done at the moment sorry. You need Cisco AnyConnect to support that, and currently that is best supported by Cisco ASA's. I have deployed little Cisco ASA 5506's at Meraki clients for just this one purpose alone. There are wild rumours that Cisco AnyConnect will be coming to MX using IKEv2, but who knows how much of the functionality will be retained.

PhilipDAth · ‎Nov 11 2018

Another long day doing another Cisco Meraki deployment. Before hand with 10 network devices. Replaced with 5 new Meraki devices.

PhilipDAth · ‎Nov 11 2018

Did you try the "Contact Us" link? https://meraki.cisco.com/form/contact

PhilipDAth · ‎Nov 9 2018

I would use 5ghz bag only if you can. How does the AP connect to your Internet router? If the AP is not running 25.13 I would upgrade to that.

PhilipDAth · ‎Nov 9 2018

Try disabling 2.4Ghz so you are only using 5Ghz.

PhilipDAth · ‎Nov 9 2018

If you need to do that then you would probably be better using VPN concentrator mode behind the upstream firewall. The default route will then be that device automatically.

PhilipDAth · ‎Nov 8 2018

You can use either the built in LTE modem or an external USB LTE modem - but not both at the same time. As soon as you plug in a USB LTE modem it disables the internal LTE modem. To use both the external LTE device would need to provide an Ethernet presentation.

PhilipDAth · ‎Nov 8 2018

What you'll find is those requests are using HTTPS, so they are encrypted, so the MX can not determine the full URL. It can only determine the base domain name by inspecting the HTTPs conversation setup.

PhilipDAth · ‎Nov 8 2018

You could use a CNAME from your domain to the DDNS entry.

About PhilipDAth

PhilipDAth

Philip D'Ath

Community Record

Badges