Meraki

RaphaelL

Keep an eye out , there is more stuff coming to that page , more or so to do with wireless 😉

mlefebvre1

[Edit: Ryan got to it before I did. ] Sounds like you want to configure some SD-WAN Policies. https://documentation.meraki.com/MX/Design_and_Configure/Configuration_Guides/Firewall_and_Traffic_Shaping/SD-WAN_and_Traffic_Shaping#SD-WAN_policies

mlefebvre1

The way that Meraki tries to identify what type of device it is for Group Policy is very finnicky these days, but what I would test first here is blocking outbound ports 80 and 443 for UDP to see if it is QUIC that is allowing them through.

Hadas

Thanks for the detailed! This is very helpful! I have a couple of follow-up questions, if you happen to know: Regarding user credentials (e.g., for WPA2-Enterprise authentication): Are these also returned or submitted in plain text via the API? Is the only layer of protection the HTTPS transport encryption? Do you know if this is a synchronous operation, or is the update queued asynchronously in the backend? If it’s asynchronous, is there a recommended way to verify that the update was successfully applied?

ospsms

Interesting ... this helped with learning about Cisco's supported Meraki dashboard conversion of some of the Catalyst 9200L-M switches. Even though we run a full Meraki network at our 2 sites, I still don't see the cost benefits of the 9200L-M plus licensing for our small shop application. Guess we'll stick to the unmanaged Trendnet 8 port 10G switch to tie our servers together with our 10G Backup NAS's then connect to the Meraki network via the MS250-24 SPF+ 10 links.

cmr

On another note, looks like dark mode has returned for me 😎

mak2018

It works and returns just those event types, but again only 5 or 6 of them and all from today. I feel like something is missing or broken with their API that is simply not allowing this to work right.

mak2018

Meraki would be a lot cooler if they did.

RaphaelL

We have the exact same use case. Ransomware , malicious employee and whatever. We built scripts to restore the org from scratch from daily config exports and obviously , APIs are the way to go

Jayt

Ok, thank you, I'll need to test next week to see if that all works. I added all 11 of these & the NAT side.

IvanJukic

Hi @merman01 , "... the nearest wap is being advertised but the devices are disconnecting from other WAP". The decision which AP to connect to is completely made by the client. If, the Wireless clients are connecting to APs further away. I would suspect they are transmitting their RF signals too far. Have a look at adjusting the power levels and minimum bitrate. This can be done in the RF Profile. See below guide for details. https://documentation.meraki.com/MR/Troubleshooting_and_Support/Troubleshooting/Wireless_Issue_Resolution_Guide#Clients_Connect_to_a_Far_Away_AP

HumbleNetworkGu

I think the issue is not on the Meraki itself, but our device. We tested variety of device such as HP, Mac, Dell and Lenovo. We are using Lenova Thinkpad T16 with AX211 WiFi card, all device not jumping here and there, only Lenovo having this issue. We have contact our local Lenova support, they said "well known issue" but there is no solution for this.

alemabrahao

You can customize the HTML. https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Customizing_the_Splash_Page

Joem1

The beta firmware seems to have corrected this issue. However, it is still loaded with beta firmware. I am expecting a new release at some point.

PhilipDAth

I'm not completely sure of your question. You can use the Cisco Meraki Add-on for Splunk. https://splunkbase.splunk.com/app/5580 You can also use Splunk Connect for Syslog. https://splunkbase.splunk.com/app/4740

GIdenJoe

I also have an update on this kind of issue. So at that customer I used my ekahau sidekick connected to an iPhone to test what happens since phones are more susceptible to this issue but it does happen to all devices. So when your device starts roaming frequently, even to the same AP on a different band the AP suddenly stops forwarding traffic. The client then actually shows a link local IP 169.254.x.x and either stays like that for one to a few minutes or if you roam to another AP it usually starts working again. It's like the AP is temporarily blacklisting the endpoint like you would have on a Cisco controller. Support is still stonewalling me and lecturing me on different antennas and coverage issues... which is annoying.

Einstein

Totally agree. It's all finger pointing. I am just a little tired of swapping out cable modems. All equipment is plugged into large APCs, so power is always clean and consistent. I have said to them before, I believe it the cable run from the pole to the DMARC. I think we are getting surges through that which blow out the cable modem via the RG6 connection. With Comcast always 👉👉👈👈👉👉👈👈.......

CHaywood

Same issue here.

DavidSack

Found it. Was looking for ARP table, sorry for the confusion.

alemabrahao

No, migrating from CS firmware to IOS XE is not mandatory. However, remember that it's good practice to always use the latest firmware version, and although Cisco hasn't yet announced the EOS update for CS versions, it is strongly encouraging the use of IOS XE.

BlakeRichardson

Try this utility. https://github.com/jamf/PPPC-Utility I have started seeing vendors provide a mobileconfig.profile for users to upload to their MDM that contain all of the relevant settings so hopefully Cisco does this soon.

Mloraditch

No, Meraki doesn't support both relaying and running DHCP on the same device. You must separate those functions if both are needed.

alemabrahao

Check the end of the page. https://meraki.cisco.com/meraki-support/overview/

MarcM1

Thanks for the replies, I misunderstood the traffic flow, it's performing as it should.

MarcP

Only way is to verify all over again... MX port and DHCP settings, MS´s uplinks and MS-Port to MR. Verify the access control: Verify MR´s Port:

About alemabrahao

alemabrahao

Alessandro Abrahao

Community Record

Badges