Meraki

PhilipDAth · ‎Sep 24 2017

You could also try plugging it into a different switch port.

PhilipDAth · ‎Sep 24 2017

Is the port that it plugs into configured for auto/auto?

PhilipDAth · ‎Sep 24 2017

You can't disable the device to the best of my knowledge. You can generate an alert when someone leaves or enters a region. I have done this before for one of my customers. I put the whole country in a geo fence area so they know when someone leaves. Another trick is to put International airports in a geo fence area. If it is an iOS device and it is in supervised mode you can disable data roaming. You can do the same for Android devices that are in Device Owner mode. On an IOS device you could also enable "lost" mode.

PhilipDAth · ‎Sep 21 2017

I have never tested it, but I have been told that Cisco Meraki kit does not check the manufacturer ID burned into the SFP ROM (unlike Cisco Enterprise kit which does).

PhilipDAth · ‎Sep 21 2017

If you log into the Meraki console and go Help/Replacement Info it will show you any devices that are affected. You don't need to do anything - Meraki already knows exactly who you are. They sort the devices so that those most likely to fail the soonest get replaced first. They will email you about arranging the swap out. Pretty much you don't need to do anything to start the process. Cisco Meraki initiate the process for you.

PhilipDAth · ‎Sep 21 2017

You don't need to rely on humans to help them.

PhilipDAth · ‎Sep 20 2017

Now you just need an AI engine and a quick answer option.

PhilipDAth · ‎Sep 20 2017

Sorry, but I think you can only download one page at a time. Any chance you can use the filter to reduce the number of events?

PhilipDAth · ‎Sep 19 2017

This is a good article about connecting up physical stacks. https://documentation.meraki.com/MS/Stacking/Configuring_a_Physical_Switch_Stack

PhilipDAth · ‎Sep 19 2017

The MS250 also uses an 80Gb/s stacking connector so uses the same cables. The cables are not that expensive compared to the switches. I often include extra cables because of this. Having an extra unused cable is much easier than having a cable too short and is unusable.

PhilipDAth · ‎Sep 19 2017

Correct. If the switches are going to be right next to each other you'll be able to use the shorter stacking cables such as MA-CBL-40G-50CM (this is assuming you are using a switch with 80Gb/s of stacking [aka 2 x 40Gb/s cables] like an MS225).

PhilipDAth · ‎Sep 19 2017

Edit the SSID properties. Under "Splash Page" select "Systems Manager Sentry enrollment ". Under "Systems Manager Sentry enrollment" select "Strict".

PhilipDAth · ‎Sep 19 2017

I wouldn't personally put them closer than 300mm to each other. You don't want the RF energy from one to bleed into the other. I would let the Meraki system work out the channels to use rather than manually controlling the channels. Then the system can adapt to interference and other transient issues. If possible, I would try to equally space the access points amongst the high density users, but sometimes you can't do that easily.

PhilipDAth · ‎Sep 19 2017

Negative. You need two cables to create a ring.

PhilipDAth · ‎Sep 19 2017

I disagree with nearly everything you say. I've written several password breaking tools for Cisco products: http://www.ifm.net.nz/cookbooks/cisco-ios-enable-secret-password-cracker.html http://www.ifm.net.nz/cookbooks/passwordcracker.html The larger the source pool of characters that the password is drawn from the more time it requires to crack. An 8 character password that consists of only letters (and where this is known) is considerably faster to crack than an 8 character password that consists of letters, numbers and special symbols. Any modern password system does not store passwords in an easily reversible manner. Having the crypted version of the password is just the starting point of breaking the password. The more complex the password set of charcaters the more time it takes to break the crypted text. A long strong password combined with a good algorithm can be impractical to crack because of the huge amounts of CPU time involved. Pretty much if the algorithm requires more than 1000 years of computing time on high end distributed kit you are pretty safe. I do agree that if the unencrypted passwords are captured by a key logger then you are screwed. You need two factor authentication to mitigate that threat.

PhilipDAth · ‎Sep 18 2017

Perhaps try recovery mode to wipe the device. https://support.apple.com/en-nz/ht204306

PhilipDAth · ‎Sep 17 2017

Change/remove the policy that causes the issue. Then in the Meraki console ask the device to check in.

PhilipDAth · ‎Sep 16 2017

You would have to put each customer into their own subnet so each customer had their own VRRP gateway. Would you also need some kind of layer 2 circit between the two sites that trunked all the VLANs.

PhilipDAth · ‎Sep 16 2017

I'm confused by your question. With regard to servers, if you dual connect them to two switches and configured the NICs on the server as Active/Standby then a single port failure will cause the server to start using the standby NIC in the other server.

PhilipDAth · ‎Sep 16 2017

When content filtering blocks something it gives a reason why. What reason is it giving?

PhilipDAth · ‎Sep 14 2017

It would be great if you could give me some Kudos as well. 🙂

PhilipDAth · ‎Sep 14 2017

Identity should be their email address. Leave "anonymous identity" blank. Password should be there password. Make sure their account is "authorised". I found this guide on how to set it up. https://documentation.meraki.com/MR/Encryption_and_Authentication/WPA2_Enterprise_Profile_Setup_on_Android

PhilipDAth · ‎Sep 14 2017

If you have no VPNs configured then you don't have an issue. If you are only using AutoVPN you don't have an issue. If you are using either client to site VPN or a third party site to site IPSec VPN then you have an issue. The only "fix" you have to use is to make sure you are using a long hard pre-shared key. Personally - I use 24 character pre-shared keys. This will mitigate the risk - but the PCI report will still say the same as it wont know you are using a PSK that is nor practically break-able.

PhilipDAth · ‎Sep 13 2017

I think I have figured this out. Set the phase 2 authentication to MSCHAPv2.,

PhilipDAth · ‎Sep 13 2017

Negative, the Cisco "Support Forums" are on Lithium as well and they don't have the same limitations .

About PhilipDAth

PhilipDAth

Philip D'Ath

Community Record

Badges