About PhilipDAth

PhilipDAth · ‎04-11-2018

ps. I should mention I have previously deployed WiFi into a ship yard with multiple docks. If you don't go with my suggestion I would recommend you really lower the customers expectation of how well this will work. Perhaps break the project into phases. Get them to commit to putting in a certain number of AP's (so you know how to space them out). Then do phase 1 initially and just put in 1 or 2 AP's, wait till there is more budget and do the next phase, etc.

PhilipDAth · ‎04-11-2018

I would personally go with a pair of MR33's, and get your self some power line extenders, and plug the furthest MR33 into that and run the network backhaul over your internal power cabling. I have heard lots of good feedback about the Dlink range (never used them myself). https://www.dlink.co.nz/home-solutions/connectivity/powerline This will give you a tremendously better system than using MESH/repeater mode. Like night and day better. Like no children complaining about the speed of the cat video on You Tube.

PhilipDAth · ‎04-11-2018

I have deployed a lot of Meraki networks. I have never used an Enterprise licence with an MX. Probably easier to not buy Enterprise licences. You give up far too much security when doing so.

PhilipDAth · ‎04-11-2018

It looks like a patch has been released.

PhilipDAth · ‎04-11-2018

To avoid re-authentication their would have to be sufficient coverage that the connection would not drop when moving between the two buildings - in this the case? Obviously the SSID needs to be the same in both buildings. Next, do the two buildings share the same layer 2 vlan (and are connected at layer2)? If so, bridge the SSID in each building to that same VLAN. Failing that, are the two buildings connected at layer 3? If so, use layer 3 roaming rather than bridging - but the result is not as perfect.

PhilipDAth · ‎04-11-2018

A product announcement on Friday the 13th (at at least it is in my time zone). I hope that is not a bad sign.

PhilipDAth · ‎04-11-2018

Any any of the vessels own by the company operating the dock? If so, you could also consider putting an access point on a few of them running in MESH mode which will punch out the coverage circuit at the expense of performance ... but note of course the coverage will vary as the vessel comes and goes.

PhilipDAth · ‎04-11-2018

Is it at all possible to put in more MR's? I think you would get excellent results using three MR's using omni antennas, spaced around 25m, 50m and 75m along the dock. You could potentially run power and fibre out to the one at 50m and then put in an 8 port PoE switch (such as an MS120-8P), and then run only copper to the 25m and 50m spots. The units at 25m and 75m wouldn't need to go on a big pole. Worst case they could go at ground level, but I think they would be fine at "hand rail" level, 1m or so off the dock. I think you would get reasonable results overall using two MR's using omni antennas, spaced around 33m and 66m along the dock. You will probably get some places with poor or no coverage still. I'm been deliberating using patch antennas, but I think you wont get a good result from the location in the diagram. That is because you have vessels almost 180 degrees either side. I think the coverage in those wide fan areas might be patchy. I also think using omni antennas from just this one location will result in very patch coverage at the ends. Also note that water kills RF signal by absorbing it. Your objects are all floating above the water, so it shouldn't be too bad - but it would make me nervous doing the deployment from one location. I would be worried about the signal dropping off much faster than in a land based environment. So I would be pushing for my first suggestion.

PhilipDAth · ‎04-11-2018

Kudo this post. https://community.meraki.com/t5/Security-SD-WAN/WE-Need-IPV6-Support-in-MX/m-p/1095/highlight/true#M218

PhilipDAth · ‎04-11-2018

I have previously imported kit into an organisation using the kit serial numbers, instead of the order number. I think this might let you import kit one device at a time without the licence. This will cause the organisation to go into licence violation mode, but everything will keep running for a good month while you get that sorted out.

PhilipDAth · ‎04-11-2018

I'm going to guess the Z3 only supports standard PoE negotiation. A 7940 does not support standard PoE negotiation, only the Cisco proprietary pre-standard method (a 7940 is a very old phone ...).

PhilipDAth · ‎04-11-2018

If this is Windows machines, you can deploy a Windows CA. Then put a certificate on NPS from the CA. Windows clients will trust it without prompting. I suspect, but have never tested, that if you create a group policy for the WiFi network, and configure it as a trusted certificate for the SSID in question, that users wont get prompted anymore. You could also configure group policy to not check the certificate ... As a matter of interest, what DNS name to you buy the certificate in (since the FQDN of the certificate is probably an internal DNS name)?

PhilipDAth · ‎04-10-2018

Note that non-Meraki VPNs are global across all networks. If you change it in one network you change it in every network.

PhilipDAth · ‎04-10-2018

Exchange Online Protection

PhilipDAth · ‎04-10-2018

When you plug in your test notebook - do you give it a static IP or let it use DHCP? Whatever you use, WAN2 should be configured the same way.

PhilipDAth · ‎04-10-2018

I'm going to say 51% no. The other 48% of me wonders if this could be done with SAML: https://documentation.meraki.com/zGeneral_Administration/Managing_Dashboard_Access/Configuring_SAML_Single_Sign-on_for_Dashboard

PhilipDAth · ‎04-10-2018

ps. This is the Meraki for Manufacturing web site. https://meraki.cisco.com/solutions/manufacturing

PhilipDAth · ‎04-10-2018

I have done deployments into factories, including clean rooms and manufacturing. You mention rolls of steel - so you are highly likely to experiences lots of multi-path signals. I would be tempted to go with the MR53 because it is 4x4 MIMO. If you then restrict your clients to using 2x2 MIMO (a very common configuration) the 4x4 MIMO will then be able to process the multi-path signals. https://meraki.cisco.com/products/wireless/mr53 If you environment is particularly dirty or "nasty" I would probably go with the MR84. It has a much more rugged case and you are less likely to kill it. https://meraki.cisco.com/products/wireless/mr84

PhilipDAth · ‎04-10-2018

If there is only a single VLAN then you should be using the bridging mode option.

PhilipDAth · ‎04-10-2018

Enable IGMP snooping.

PhilipDAth · ‎04-10-2018

Sorry for the slow response. I haven't been able to spend my normal 18 hours on the community today (that's happy sarcasm). Thank you @CarolineS and all the other great supporters of the community. This is by far my favourite Cisco forum. I really appreciate the camera which I have some big plans for. Now if I can just get @GeorgeB to create a camera API to allow me to do searching between defined zones I'll enable Meraki to sell so many more cameras they'll name the 10th anniversary edition after me.

PhilipDAth · ‎04-10-2018

A better level of integration with Cisco Umbrella is coming, which does support secure DNS, but I could not say how well that aspect will be supported.

PhilipDAth · ‎04-09-2018

I'm looking for a BLE device that could be used for a loyalty card (that ideally we can pick up with MR33 access points). Does anyone have something they would care to recommend?

PhilipDAth · ‎04-09-2018

Anything in the security event log?

PhilipDAth · ‎04-09-2018

How is an Office 365 licence treated? Should be the same. I would probably check with your companies accountant to make sure.

PhilipDAth

Community Record

Badges