Meraki

PhilipDAth · ‎Oct 16 2018

You could try the "Instant Demo". https://meraki.cisco.com/lp/free-demo

PhilipDAth · ‎Oct 16 2018

No.

PhilipDAth · ‎Oct 14 2018

I've just re-bound a bunch of networks from one template to another (and the second template was a copy of the first) - and it does reset the IP addressing.

PhilipDAth · ‎Oct 13 2018

This is what I would do. Reboot the two switches. Then quickly change the VLAN1 ip address. Then when the switches come up they'll DHCP a new IP address from the new range. Ditto for the APs, as they will all power cycle. Anything attached to the switches will see a port down/up and will try DHCP again. This is assuming everything is using DHCP and not statically addressed.

PhilipDAth · ‎Oct 13 2018

Never tried that. Yes, I would remove it in the dashboard first. Wait for the config to deploy. And then change the stacking cables so it was not part of the stack. I would allow for some downtime. I wouldn't be surprised if the stack rebooted. It would be a good time to schedule in any software upgrades that might be waiting as well ... For the removed stack member - I would factory default it, just in case.

PhilipDAth · ‎Oct 13 2018

If you look under: Organization > Settings > SNMP You'll see a link to download it.

PhilipDAth · ‎Oct 11 2018

No. Some one of dashboard aspects, such as editing switch ACLs, are limited to 128.

PhilipDAth · ‎Oct 11 2018

I have to do this exact task within the next 7 days so would be keen to know the answer ...

PhilipDAth · ‎Oct 11 2018

I don't know the answer. I would say under 128 you would be safe. 128 or more and I would be worried about Dashboard limitations, and you would need to get someone to try and creating that many and see what happens.

PhilipDAth · ‎Oct 11 2018

If the remote end wont add it your client VPN subnet - so you really do want to access the remote end of the VPN from a subnet of yours not being forwarded via the VPN - then you'll need to use something like a proxy or a jump host.

PhilipDAth · ‎Oct 10 2018

Have you configured your AWS Security Group to allow the traffic from your VLANs? Have you definitely selected to include the subnet in the VPN on the MX (under Security Appliance/Addressing and VLANs)?

PhilipDAth · ‎Oct 10 2018

There are not many security related alerts. Can you see ones like this malware one?

PhilipDAth · ‎Oct 9 2018

I think you have to delete and re-create.

PhilipDAth · ‎Oct 8 2018

What format is the floor plan in and what size is it? Sometimes when I have had an issue I save it in another format like PNG. I notice that smaller floor plans (say under 2MB to 3MB) "perform" much better as well.

PhilipDAth · ‎Oct 8 2018

The licence term will not change. All that will happen is you will have an additional unused licence.

PhilipDAth · ‎Oct 8 2018

You'll probably need to find a Ubiquity forum for this one. I would say you would need to look at the Ubiquity web interfaces and see what they report. I'm going to guess an alignment error (one of the dishes knocked out of alignment) because of the lack of signal reported on one unit. It could also be that water has gotten into RF cables, or a million other things. But I would start by collecting data from the various parts.

PhilipDAth · ‎Oct 4 2018

I don't think you can.

PhilipDAth · ‎Oct 3 2018

I just tried enabling Client VPN for an MX in VPN Concentrator mode and it took the config just fine.

PhilipDAth · ‎Oct 3 2018

Yes.

PhilipDAth · ‎Oct 3 2018

You need to plumb this third party into VLAN2. You can do this via VLAN trunking, or plug them directly into some ports in VLAN2.

PhilipDAth · ‎Oct 3 2018

Each VLAN needs a unique subnet, and the MX should have a unique IP address in that subnet. What you are showing is fine.

PhilipDAth · ‎Oct 3 2018

Under routing? Where are you seeing that heading?

PhilipDAth · ‎Oct 2 2018

Not many customers host actual web sites themselves any more ... but that CNAME option sounds great. I tend to use Amazon Route 53 for my DNS. If you use a service like this you can create a health check. This only includes an IP in the DNS response if it is actually up and responding. The service is very cheap. https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-failover.html

PhilipDAth · ‎Oct 2 2018

Put the space you rent out into a seperate VLAN (and hence subnet). Use traffic flow preferences to set that subnet go out a specific WAN circuit (under Security Appliance/Traffic Shaping).

PhilipDAth · ‎Oct 2 2018

You can already do that - but better. Connect two different upstream providers to the two WAN ports. BGP advertising a default route only verifies connectivity between you and the ISP is working. The MX verifies connectivity all the way back to the Meraki cloud - so an issue within an ISP or their upstreams will now be detected. Using email as an example, you can point the DNS at the pair of IP address (one from each provider).

About PhilipDAth

PhilipDAth

Philip D'Ath

Community Record

Badges