Meraki

PhilipDAth · ‎Mar 19 2018

Is there much of a price difference between an SFP+ NIC and a 10GBaseT NIC? If the price difference is small and you only have 5 servers wouldn't it make sense to go with the significantly lower latency technology?

PhilipDAth · ‎Mar 19 2018

With the VMX, it will route all subnets listed under: Security Appliance/Site-to-site-VPN/VPN Settings/Local Networks Here is a screen shot of one I do serving multiple availability zones. If you have two VPC's peering with each other you should be able to get to the remote VPC. You will need the remote VPN routes listed here, and on the remote VPC you will need routes to get back to your remote VPN subnets. You can not connect a vMX across multiple VPCs across multiple accounts. You need multiple vMXs.

PhilipDAth · ‎Mar 19 2018

Well done @CarolineS. Maybe an extra round of coffee's at the office today to celebrate? You have put in so much effort and it is great to see the rewards and recognition for your work.

PhilipDAth · ‎Mar 19 2018

You've inspired me to have another go @Adam. Perhaps todays project.

PhilipDAth · ‎Mar 18 2018

I think it would make sense to also sniff DNS dynamic registration packets.

PhilipDAth · ‎Mar 18 2018

It will be interesting to get some feedback from @MerakiDave. Normally the system sniffs DHCP, NetBIOS and Bonjour traffic for device names. I don't believe it uses or sniffs DNS. https://documentation.meraki.com/MR/Monitoring_and_Reporting/Rename_a_Client_Hostname

PhilipDAth · ‎Mar 17 2018

I don't understand your issue. Why can't you use a simple VLAN?

PhilipDAth · ‎Mar 17 2018

The fact the no one else makes 10GBaseT SFP+ adaptors including Cisco for any make of switch makes me suspicious of this product. "to good to be true"

PhilipDAth · ‎Mar 16 2018

Thank you so much! This is exactly what I want. Do you know this does not appear in any Meraki documentation anywhere? I am going to give this a test during the upcoming week.

PhilipDAth · ‎Mar 16 2018

Fair comment. 🙂 I have had good success using the MS425-16 switches for servers and storage. They don't have a lot of buffering though, so you must have sure to only use 10Gbe SFP+ connections and not put it any SFP Gigabit modules (a 10Gbe port sending to a 1Gbe port can require a lot of buffering to avoid packet loss).

PhilipDAth · ‎Mar 16 2018

But why biff away so much performance when usually only a small number of SFP+ ports are needed for servers and storage? Especially when you consider the cost of an MS350-24X (just so you can get 10GBaseT) ports versus an MS250 and getting SFP+ cards for the servers. TwinAx SFP+ cables are also relatively cheap. I guess I find it hard justifying to myself why you would want to spend extra money for lower performance.

PhilipDAth · ‎Mar 16 2018

That is pretty stink about the MGig compatibility issue. What brand of MGig ports are you using? You are very lucky to have all MGig ports. I agree with @Uberseehandel - it's not possible to drag out more than 2.5Gb/s of data throughput from an MR53. Supporting a higher connection speed would only limit the maximum cable length with no other benefit. The other kicker that also limits the throughput of the MR53 is that most clients are 2x2. You get the occasional 3x3 client. To date, their are no 4x4 clients. So you will never even get a high bandwidth client to really max it out.

PhilipDAth · ‎Mar 16 2018

The MS350-24X has 8 x MGig ports. MGig ports can also operates as 10GBaseT ports. https://meraki.cisco.com/products/switches/ms350-24x BUT 10GBaseT has about 100 times more latency than SFP+, so I could not recommend this technology for servers - and especially for anything transaction orientated like storage, databases, Microsoft, Exchange, etc. Try and go for SFP+ if you can.

PhilipDAth · ‎Mar 16 2018

If you are already connected, you will remain connected and everything will keep working.

PhilipDAth · ‎Mar 15 2018

I think the next badge you should create is MOTY.

PhilipDAth · ‎Mar 15 2018

First thing - the "Overview" page does not update dynamically. The best solution is to use one of the browser plug ins that regularly refresh the page. Failing that, you can use this hack that I posted. https://community.meraki.com/t5/Managed-Services/Need-Dynamic-MSP-Dashboard-Monitoring/m-p/7355/highlight/true#M14

PhilipDAth · ‎Mar 14 2018

I lied. This is probably not a get rich quick scheme. To earn some money all you have to do is find some critical vulnerability in Cisco Meraki software or hardware. https://bugcrowd.com/ciscomeraki

PhilipDAth · ‎Mar 14 2018

You want everything to have the same VLAN topology, and the safest way to do that is to trunk all VLANs on all ports. All VLANs are mapped to the default MST instance by default.

PhilipDAth · ‎Mar 14 2018

I'm still waiting for the neural plug in so I don't have to read at all.

PhilipDAth · ‎Mar 14 2018

Change your other Cisco devices to using MST before you integrate Meraki. The Cisco Enterprise per VLAN RSTP implemention can cause all sorts of issues when used with Meraki. I would go with a simple MST design with a single area (so you can simply issue the command "spanning-tree mode mst" and nothing else). I would also do this since you are phasing out the old Cisco Enterprise kit. Try and avoid layer 2 loops in your design while you have both sets of kit deployed. If you have much multicast in your network use the beta software 10.18 (or better if it has come out by then). Otherwise 9.36 should be fine.

PhilipDAth · ‎Mar 14 2018

The devices only report than WAN IP, and it usually happens within a minute.

PhilipDAth · ‎Mar 13 2018

Actually I only just took it off the charger this morning. The app to control it is giving me a bit of grief, but the reset works well. I need to sit down and spend an hour. I'll do a video towards the end of the week.

PhilipDAth · ‎Mar 13 2018

On a side note, a newbie question: how do I see which traffic is hitting/being blocked by a specific rule? Alas you can't, without setting up a Syslog server. https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration

PhilipDAth · ‎Mar 13 2018

Use content filtering and block "Proxy avoidance and anonymizers".

PhilipDAth · ‎Mar 13 2018

I would not load balance. The speed difference between the two circuits is too big and will lead to poor user experience.

About PhilipDAth

PhilipDAth

Philip D'Ath

Community Record

Badges