Meraki

PhilipDAth · ‎Nov 16 2017

Authenticate using PEAP and MSCHAPv2. You'll need to install your CA certificate on the non-domain computers in their trusted root authorities certificate store before they'll trust your NPS server.

PhilipDAth · ‎Nov 15 2017

Like @Adam, I can not clearly understand your configuration which is making it very hard to help you. Lets get specific. Please answer these questions: The outside public IP address of the MX is: The internal IP address of a client is: The public IP address you are using for NAT to the above client is: For the ping that does not work; The ping is being done from a machine with the IP address: The IP address being ping'ed is:

PhilipDAth · ‎Nov 14 2017

I think @mmmmmmark is correct. The key bit from that page is: "On all other MX models, a LAN port can be repurposed into an Internet port for use as WAN 2." You don't have an MX - you have a Z.

PhilipDAth · ‎Nov 14 2017

I think you should check the local status page on an affected access point and check what it is reporting. It might be a different issue - like DNS not working properly - that just happens to have the same impact.

PhilipDAth · ‎Nov 14 2017

I can't remember the boxes. Do the boxes have any bar codes on them? You how tried using an ordinary USB bar code reader and a notebook?

PhilipDAth · ‎Nov 14 2017

If you really were deploying a full mesh by making every site a hub and assuming each site has a single Internet circuit, then the number of VPNs per site would be: n x (n-1)/2 So if you have 10 sites that would be 45. So if you have 20 sites that would be 190. So if you have 50 sites that would be 1225.

PhilipDAth · ‎Nov 14 2017

It is not worked out that way. VPNs are only built between spokes and hubs. Spokes do not build VPNs to other spokes. Hubs do build VPNs to other hubs. If you have 20 remote branches terminating on 1 hub, then each remote branch has a single VPN and the hub would end up with 20 VPNs. If you were usual dual Internet connections at each branch and SDWAN, then each branch would have 2 VPNs, and the hub would have 40 VPNs.

PhilipDAth · ‎Nov 13 2017

If you want the user to have no restrictions, assign them the "White List" group policy.

PhilipDAth · ‎Nov 11 2017

Is your security appliance doing DHCP and giving your clients private IP addresses (which will then be NATed)?

PhilipDAth · ‎Nov 10 2017

I agree with @OyinTech. I have also seen AP's going into repeater mode when they get PoE but something is wrong with the cabling or switch port configuration that prevents the AP from communicating via its Ethernet port.,

PhilipDAth · ‎Nov 9 2017

It sounds like you don't have rights to edit Administrators. You will need to ask one of their Administrators to remove you.

PhilipDAth · ‎Nov 9 2017

If you go: Organisations/Administrators You should be able to tick yourself, then then click delete at the top.

PhilipDAth · ‎Nov 9 2017

Is their any point in doing a hardware diagnosis? You replaced the existing unit with a new MX and the problem stopped happening. The existing MX60 must have a fault.

PhilipDAth · ‎Nov 9 2017

I would say the data rate at that range would be very low. I typically allow for a radius of up to 30m.

PhilipDAth · ‎Nov 9 2017

If you know if is the firewall then don't worry about it. Perhaps you had a firmware update recently and it is caused it to look again.

PhilipDAth · ‎Nov 9 2017

What happens if you change the query interval to 12 to match the error message,

PhilipDAth · ‎Nov 9 2017

It will transfer across automatically. You wont have to do anything.

PhilipDAth · ‎Nov 8 2017

You are really choosing to do this the hard way. It is a million times simpler to leave the access points using DHCP and match a subnet and port type in RADIUS. Your way requires a heap of automation and scripting. One may requires - none.

PhilipDAth · ‎Nov 7 2017

No, you wont be able to plug it in that Internet port and operate in transparent mode. Transparent mode operates between a single Internet port and the LAN ports. Take a look at this article for more information. https://documentation.meraki.com/MX-Z/Networks_and_Routing/Passthrough_Mode_on_the_MX_Security_Appliance_and_Z1_Teleworker_Gateway

PhilipDAth · ‎Nov 7 2017

No. How things plug together will not trigger any rules. Devices creating attack traffic will. So as long as none of your devices are doing this you will be fine.

PhilipDAth · ‎Nov 6 2017

The bandwidth limit is a speed limit (such as 5Mb/s) and not a volume limit. To specify a time limit you must be using a splash page. To configure go: Wireless/Splash Page/[scroll to the bottom] Then change "Splash frequency" to be what you would like.

PhilipDAth · ‎Nov 6 2017

Absolutely. Now I just need to fill the fridge up. That might be tonight's job.

PhilipDAth · ‎Nov 6 2017

Perhaps something might be logged to the event viewer.

PhilipDAth · ‎Nov 6 2017

This URL is often used on the local status page of a switches, but it does not always seem to work for me: https://dashboard.meraki.com/manage/dashboard/show?mac=xx:xx:xx:xx:xx:xx&port=yy

PhilipDAth · ‎Nov 6 2017

The forecast is wrong. I took this picture recently at a quiet beach called "Langs Beach". The weather is very nice at the moment.

About PhilipDAth

PhilipDAth

Philip D'Ath

Community Record

Badges