Meraki

PhilipDAth · ‎Jul 17 2018

Alas only the switches report the specific port that a device is connected to.

PhilipDAth · ‎Jul 17 2018

It uses uses path pre-pending to make one of the "exits" less desirable (aka the primary hub for a spoke will be the most attractive, other hubs will use pre-pending).

PhilipDAth · ‎Jul 17 2018

I'm not in the beta, but from what I remember, I don't recall their being support for any community attributes. My recollection is it uses an as-path filter to prevent route redistribution.

PhilipDAth · ‎Jul 17 2018

Security Appliance/Traffic Shaping/scroll down to "Traffic shaping rules": Add a custom expression for the subnet and set the priority to high.

PhilipDAth · ‎Jul 16 2018

July 14th? Who did the drawing of the socks? Anyone we know?

PhilipDAth · ‎Jul 16 2018

Wahoo, my loot arrived yesterday. Thanks @CarolineS and everyone else who gave out all the Kudo's and Solutions.

PhilipDAth · ‎Jul 14 2018

I just tried it as an Organisation Admin in Chrome, and I could see the "Show key" button. If you are not using Chrome, perhaps try that. Otherwise it sounds like you might need to be an Organisation Admin to retrieve the key.

PhilipDAth · ‎Jul 12 2018

Perhaps something upstream is doing policy routing, and routing the requests via an alternative circuit and NATing it.

PhilipDAth · ‎Jul 12 2018

I wa running 10.26 for quite a while without issue. I upgraded to 10.29 earlier this week and so far no issues - but that is not much time.

PhilipDAth · ‎Jul 12 2018

You can see layer 3 VLANs, because they have an IP address configured on them - but there is no where to see a list of all the configured layer 2 VLANs.

PhilipDAth · ‎Jul 12 2018

You could use static route tracking. https://documentation.meraki.com/MX-Z/Networks_and_Routing/MX_Routing_Behavior#Static_Route_Tracking If it is a managed service the service provider should be doing something like HSRP for you, making the two routers appear as one. If this is an Internet service though I don't know what you can't just use the normal WAN ports on the MX.

PhilipDAth · ‎Jul 12 2018

You have to expect some things to be broken in a BETA ... This just started with the form. 🙂

PhilipDAth · ‎Jul 12 2018

This could vary by the shard you are on. Log into the dashboard and then in the top right go to Help/Firewall Info. It will give the specific IPs for your shard.

PhilipDAth · ‎Jul 11 2018

You should be able to just correct the typo. What happens when you try? Otherwise just delete that VLAN and create it again.

PhilipDAth · ‎Jul 11 2018

I'm a bit grey on this one, but I'm about 75% sure that no matter what you configure, ClientVPN can not be used to access remote resource on the other side of a non-meraki VPN.

PhilipDAth · ‎Jul 10 2018

I don't know - but Meraki primary supports LLDP.

PhilipDAth · ‎Jul 10 2018

Enable LLDP on the lan switch, and then look at that info.

PhilipDAth · ‎Jul 10 2018

I'm with @Adam, I often have spare TwinAx cables on hand as well. It is definitely the cheapest way of doing 10Gb/s.

PhilipDAth · ‎Jul 10 2018

As @AjitKumar says, all you really need to do is just move the MX to the new network, and it will get a new config.

PhilipDAth · ‎Jul 10 2018

If you go into the actual switch port to the CDP/LLDP section on the right hand side is a link called "raw". This display a lot more of the CDP/LLDP info. It is possible you might need to be running 10.x code to see this. Can't remember.

PhilipDAth · ‎Jul 10 2018

I stand corrected. I had based my answer off the specifications. The MS120 specifications don't mention support for DHCP relay. I knew they didn't have DHCP server support, so that also seemed reasonable their was no relay support. https://meraki.cisco.com/products/switches/ms120-24#tech-specs I just had a quick look, and indeed the option does appear when you have mentioned.

PhilipDAth · ‎Jul 9 2018

The Powershell service doesn't support negotiating to a stronger cipher suite? I'm amazed!!! It should support upgrading to stronger crypto without needing a code change.

PhilipDAth · ‎Jul 9 2018

You won't be able to use OSPF between the sites - you should not need it. In each case, the default route for each switch should point to its local MX. The MX will need to know the routes in use at each site already, and you simply include those in AutoVPN.

PhilipDAth · ‎Jul 8 2018

Make sure the case of the SSID exactly matches.

PhilipDAth · ‎Jul 8 2018

You can pattern match on part of a string with the Called-Station-ID attribute. In this case, if you put just the SSID it should match. https://blogs.technet.microsoft.com/netgeeks/2017/05/02/how-to-authenticate-multiple-wifi-ssids-on-a-single-nps-server-radius/

About PhilipDAth

PhilipDAth

Philip D'Ath

Community Record

Badges