Meraki

MacuserJim · ‎Dec 13 2018

I would think you could configure an AWS hardware VPN as redundancy to the vMX, but I've never tried it. https://aws.amazon.com/premiumsupport/knowledge-center/create-connection-vpc/

MacuserJim · ‎Dec 13 2018

You're welcome! I use a vMX in AWS and it is super helpful. If/when you do any pcaps let us know what you find.

MacuserJim · ‎Dec 13 2018

Have you tried pinging from the MX to Azure to make sure you can hit it? Have you also done any pcaps to see what traffic is being sent/received? Also have you considered using the Meraki vMX in Azure?

MacuserJim · ‎Dec 13 2018

I agree with what @NolanHerring said. One thing I will add is that documentation is written and reviewed before being published, as apposed to a support technician that is stating something in the moment that can either have misunderstood a question, been new to the role, or even just had an "off day" and was having a hard time focusing. Don't get me wrong, Meraki support is fantastic and on the ball, but everyone is prone to human error.

MacuserJim · ‎Dec 13 2018

When you say you tried resetting both, I assume you mean the problem MR and the MS that it is connected to? One thing you could try is physically swapping the problem MR with a working MR. If the problem MR continues to be the issue, then you might just need support to RMA it. If the other MR becomes the problem MR then it would point to an issue in the connection, maybe port config issue on the MS, bad cabling, etc. and further troubleshooting can be done to help narrow it down.

MacuserJim · ‎Dec 12 2018

You can only do it on the MR appliances.

MacuserJim · ‎Dec 12 2018

I've never seen that error before, but it seems to be having an issue with passcode restrictions. I would suggest making sure there are no profiles that are restricting or otherwise configuring the passcode settings and go from there.

MacuserJim · ‎Dec 10 2018

DEP is the easiest way to supervise an iOS device, but you can also use Apple Configurator to supervise the device as well. Here's Meraki' documentation for doing that. https://documentation.meraki.com/SM/Device_Enrollment/Enrolling_and_Supervising_iOS_Devices_using_Apple_Configurator_2.5_or_Later

MacuserJim · ‎Dec 10 2018

If you copy a network it should copy the Group Policies. On a side note, what do you mean by "The configuration templates do not offer this"? I have some group policies in some of the templates I manage so each network bound to the template can use those policies.

MacuserJim · ‎Dec 10 2018

SSID Variation examples? You could do something like "Company Guest" and "company guest" or "Company guest".

MacuserJim · ‎Dec 10 2018

@PhilipDAth that's right, the dashboard will error out if you attempt to have two SSIDs with the same name, it is case sensitive though so you could have a very minor change between the SSIDs.

MacuserJim · ‎Dec 7 2018

The script would be using the API, so to automate it you would set it up to run automatically from a computer somewhere. I think it would be easier to set up two different SSIDs though.

MacuserJim · ‎Dec 7 2018

An MX would work to aggregate multiple WANs to a single connection for your primary MX. However there are devices out there designed for WAN link balancing where you can have multiple WAN connections go to it, then provide a single WAN connection to your firewall. For example you could have 5 WAN connections go to the WAN link balancer, that would then provide a single connection for you to configure on your MX.

MacuserJim · ‎Dec 7 2018

1) They don't have to have to be in the same subnet, I have set them up before where each MX had different ISPs. 2) You don't want your MX appliances connected directly together, just to the switches. This is a pretty good article to help out and explain some of these in a bit more detail. https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair

MacuserJim · ‎Dec 7 2018

Are you having issues with iPhone 8's in particular with the 5ghz band? They support 5ghz so if it's having issues there is likely something else causing the problem.

MacuserJim · ‎Dec 6 2018

There isn't a way to configure 3 WAN uplinks on an MX, you would need something in front of the MX to aggregate the connections to a single connection for the MX.

MacuserJim · ‎Dec 6 2018

Got my ML (Meraki Lego) configured!

MacuserJim · ‎Dec 6 2018

You'll want to assign the hub an IP range outside of the subnet used for the spoke sites to avoid overlap.

MacuserJim · ‎Dec 4 2018

We've joked about doing something like that for the MX and/or modem, we've come up with all sorts of schemes for keeping that active even when the MX is offline. As long as you are able to keep the smart outlet online it should work, just make sure that even when you turn the outlet off to cycle equipment you don't accidentally cut off it's internet access. Also the lack of enterprise management on it might mean that it could pull a firmware update in the middle of the day and take down your network. If you use a Meraki switch you can just cycle the PoE ports the APs are connected to.

MacuserJim · ‎Dec 4 2018

@PhilipDAth is right about "pinning" a device to a firmware, just beware that if you decide to update the firmware later on you would need to reach back out to support to unpin it. I wonder if they have a way to restrict the updates so the Meraki admins are not auto scheduling them.

MacuserJim · ‎Dec 4 2018

You'll probably want to change the protocol for rules #9 and #10 to any instead of TCP. I assume on the Addressing and VLAN page you have 172.16.78.1 and 192.168.0.1 set up as the MX IPs? You'll be able to ping those IPs, but if you try to ping another IP in that subnet that would be assigned to a client your L3 rules #9 and #10 should block those.

MacuserJim · ‎Dec 4 2018

Try this. https://documenter.getpostman.com/view/897512/meraki-dashboard-api/2To9xm#1efb40c2-4c39-3c0d-a9a4-ff7291ca0b39

MacuserJim · ‎Dec 4 2018

Have you looked at the event logs for the MR? I would guess there is an external factor that is causing the MR to stop checking into the Meraki cloud, but still have access to the internet. Where you are still able to ping an IP address, I wonder if there is maybe a DNS issue somewhere. That's just an idea, there are likely a lot of things that could be the cause. Either way I would look at the event logs for that time and see what they say and go from there.

MacuserJim · ‎Dec 4 2018

There isn't a way to change that in the dashboard. You could try calling support and see if there is something they can do on the back end for that.

MacuserJim · ‎Dec 3 2018

Thanks Caroline! It's great to be a part of the community and to take a little bit of knowledge and to contribute a little bit of knowledge. Good work @NolanHerring, @jdsilva, and @PhilipDAth!

About MacuserJim

MacuserJim

Community Record

Badges