Meraki

PhilipDAth · ‎May 28 2018

I haven't seen anything like that. So I would say no.

PhilipDAth · ‎May 27 2018

Much better!

PhilipDAth · ‎May 24 2018

Are you using a current firmware version?

PhilipDAth · ‎May 24 2018

Recently a new API was added that lets you return the status of every device in an organisation via a single API call. I don't know if it also returns the cellular status. This is it here: https://dashboard.meraki.com/api_docs#list-the-status-of-every-meraki-device-in-the-organization I think the "status" field changes when on cellular, but I have not tested it.

PhilipDAth · ‎May 23 2018

I'm thinking if it requires manual human effort, and research has shown it makes no material impact to the "score" then it isn't worth doing. Otherwise it is just creating more and more work for you. The leaderboard sounds fine to me.

PhilipDAth · ‎May 23 2018

Can "kudos + 2x solutions" be calculated automatically by the "system" or will a human have to "score" this job every month?

PhilipDAth · ‎May 23 2018

Yes, you could use either an MX64W, or my preference, an MR64 with an MR33. The standalone access points are much better - but there is an extra cost. You would need to deploy the NPS server on your existing server. You would then need to deploy the DUO proxy on the same server. It's going to be complicated, because NPS and DUO will want to use the same ports, so you are going to have to re-configure one of them to use non-standard ports. https://duo.com/docs/authproxy_reference If you haven't done this before and are not familiar with RADIUS then I would get someone in to help you.

PhilipDAth · ‎May 22 2018

How many users do you have?

PhilipDAth · ‎May 22 2018

How does the MX64W fit into the picture then?

PhilipDAth · ‎May 22 2018

I'm confused by your question. You configure the MX64 to use RADIUS authentication for VPN users. You point that at the DUO RADIUS proxy (which then points to NPS in Windows).

PhilipDAth · ‎May 22 2018

You need to be using bridging rather than NAT mode, and you need both the client devices and the ChromeCast devices to be located in the same guest vlan.

PhilipDAth · ‎May 22 2018

You can use it using Duo and the RADIUS proxy server (which you'll need to deploy on premise). We have tested it using push notification and it works great. https://duo.com/docs/radius

PhilipDAth · ‎May 18 2018

@Adam is right, the MX will limit the performance to a level where it will operate correctly. So you can happily plug in a much faster circuit. You wont be able to use its full capacity, but the MX will operate without issue on it.

PhilipDAth · ‎May 17 2018

I checked abs the Meraki site is definitely using TLSv1. 2 and and supports strong elliptical curve encryption algorithms. Are you sure the date is correct on your machine?

PhilipDAth · ‎May 17 2018

Is this via the normal dashboard?

PhilipDAth · ‎May 15 2018

Meraki sunglasses?

PhilipDAth · ‎May 15 2018

I crack myself up.

PhilipDAth · ‎May 15 2018

What about a green adhesive dot on the forehead?

PhilipDAth · ‎May 15 2018

Actually it looks like they try to connect to these three URLs: captive.apple.com www.airport.us www.thinkdifferent.us

PhilipDAth · ‎May 15 2018

I think Apple devices try and connect to captive.apple.com to determine Internet access.

PhilipDAth · ‎May 15 2018

Any chance the DHCP scope is running out of IP addresses?

PhilipDAth · ‎May 15 2018

I agree with @BrandonS. I would compared the TCP/IP settings on a machine on your LAN that you can ping to one that you can not. There will probably be a difference. My second guess is Windows Firewall is blocking it.

PhilipDAth · ‎May 15 2018

You might need to update the version of Powershell you are using - or the OS. 🙂

PhilipDAth · ‎May 15 2018

Negative. Did you know using timestamps is a really useful method for resolving throughput and tcp re-transmission issues on asymmetric crciuits, like ADSL? It fixes far more problems than it causes - so I really wish people didn't do this. The threat posed by timestamps and the implementation in OS tcp stacks was resolved long ago.

PhilipDAth · ‎May 14 2018

What is the user doing that is using a lot of bandwidth? Video? File sharing? If it is video you may effectively cripple them. If you don't want them using video it should be disabled on the server. A lot of the Cisco Spark functionality is *free*. Once you use it you wont want to go back to Skype for Business. https://www.webex.com/products/teams/index.html So you know what I think the best way to solve the Skype for Business problem is. Replace it with something better.

About PhilipDAth

PhilipDAth

Philip D'Ath

Community Record

Badges