Meraki

AjitKumar · ‎Jun 23 2022

Hi Ross, Apologies I did not read the OP properly. I am clueless for this behavior. Usually config is updated near to real time on Meraki Solutions. I hope Meraki Support may help us understand / fix this behavior.

AjitKumar · ‎Jun 23 2022

Hi @Samala Help us with more information. If the SSID is in bridge mode - The responsibility of assigning IP is with your on premise DHCP server. You may try enabling NAT mode for the SSID. This will use Meraki DHCP server to assign IP Addresses. Wireless > Access Control > Addressing and Traffic

AjitKumar · ‎Jun 23 2022

Hi @Ramtech, Seems strange. As MX is L3 and NAT Device. I understand all the downstream devices should use W1 / W2 as per the availability of Link. I do not see any role for MS / MR out here. They are just L2 (NO NATTING). The NATTED (Public IP) is for the MS / MR to reach cloud. The devices (endpoints ie. Laptops / Desktops) connected downstream would also work with the similar behavior. One thought - could you please review Uplink selection & Internet Flow configuration. Security & SDWAN > SDWAN & Traffic Shaping > Uplink selection Also you may consider reviewing the firmware configuration.

AjitKumar · ‎Feb 21 2022

Hi @AGUILLEMRO, I understand the below should be possible. You need to choose the desired ports and enable Aggregation service.

AjitKumar · ‎Feb 17 2022

Hi @ChrisL2021 Looks like syslog is the only way. IBM too points us in the same direction. https://www.ibm.com/docs/sk/dsm?topic=meraki-configure-cisco-communicate-qradar

AjitKumar · ‎Feb 17 2022

Hi @ChrisL2021 Are you referring to the below https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration

AjitKumar · ‎Feb 3 2022

Hi @Roey1984 Congratulations on the New Firewall 😊. I understand your connectivity plan is good and should work fine. You can use both ISP's together. You may use the links in Active/Active or Active/Passive. You will find traffic load balancing options available in the dashboard. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences

AjitKumar · ‎Feb 3 2022

Hi @Brash I understand the default RMA is on the basis of "Best Effort" - There is no SLA attached to this. We may consider CON-ROB for critical deployments.

AjitKumar · ‎Feb 3 2022

Hi @Brash Hope you have read the below document. This explains the need and options available under this program. https://meraki.cisco.com/product-collateral/meraki-now-at-a-glance/?file

AjitKumar · ‎Jan 25 2022

Hi @Ubaidkhan, Removing the new update has resolved this for all the customers. https://www.ajit.network/post/how-to-fix-cisco-meraki-client-vpn-error-after-january-windows-updates Hope the client configuration is correct as per the documentation https://documentation.meraki.com/MX/Client_VPN/Client_VPN_OS_Configuration How about reaching Meraki Support?

AjitKumar · ‎Jan 19 2022

Hi @Hector_95, MX100 en la misma red funciona en HA (Activo/Pasivo). El modo de espera se hará cargo una vez que falle el principal. Por lo tanto, la configuración seguirá siendo la misma en ambas cajas. Además, la "Configuración de VPN de terceros" es una configuración para toda la organización.

AjitKumar · ‎Jan 19 2022

Hi @JamesPickup https://community.meraki.com/t5/Mobile-Device-Management/monitor-VPN-using-SNMP/td-p/7797

AjitKumar · ‎Jan 10 2022

Voted Inder.

AjitKumar · ‎Jan 6 2022

The idea is good as long as user load is less. Also I may use saved money to achieve redundancy at the Firewall Level if already not planned.

AjitKumar · ‎Jan 5 2022

Hi Shaik, I understand we cannot NAT a complete VLAN with a public IP. However NATTING 1 Private IP Address against 1 Public IP Should be possible. You may check the following threads https://meraki.cisco.com/blog/2014/08/1many-nat-for-meraki-mx/ https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings

AjitKumar · ‎Jan 4 2022

Hi Everyone, I have shared this with @Philip. However seeking everyone input on the ideas / suggestion to achieve this. We are in Between of Installation for Meraki MX250. Requirement is: 1. To create 02 Users (i.e. ABC & XYZ) in Firewall/Active Directory / Radius Server. 2. ABC Users will be used among 1500 Students all students will use ABC User for Login via Smartphones/Laptops/Desktops. 3. XYZ Users will be used among Approx. 200 Staff & Management will use XYZ User for Login via. Smartphones/Laptops/Desktops. 4. ABC Users will have restricted Bandwidth and content filtering while XYZ Uses will have unrestricted Policy. 5. While having a Event/Seminar/Functions at Place they can restrict ABC Users to access the Internet. Task which we have tested and facing issues. 1) User Authentication via Radius server -- When we are Authenticating Users via Radius Authentication Group Policies are not Applying onto Users it takes by default Normal Policy. 2) User Authentication via Active Directory server. -- When we are Authenticating Users via Active Directory Authentication, Group Policies gets Applied but user session timeout is 02 Days which is not acceptable by Customer. This is an unmanaged (Hybrid Non-Meraki) switching environment. Hence VLANs are not possible. The customer is using Hybrid Non-Meraki APs.

AjitKumar · ‎Jan 4 2022

Hi @llawania, I understand CMNA Training and Certification is arranged on a regular basis and we can certainly reapply. We need approval from the Meraki Sales for the same.

AjitKumar · ‎Jan 3 2022

Screen Capture for what @Jhon explained.

AjitKumar · ‎Jan 2 2022

Hi @PhilG I understand ordering Hardware and Licenses with different email address shall not be a problem. I am not aware of any restriction of licenses not being usable while ordering them on different email address. You should be able add Order Number / Serial Number in the same organization. As we have 2 offices .ie We need to create 2 networks under the same organization. This will need us to purchase 2 Licenses. Also it is must that both the license should be of same type (Enterprise or Advance)

AjitKumar · ‎Dec 30 2021

Hi @Ubaidkhan As suggested We have 2 Options to create a "New Network" provided we have Organization Wide Administrator Rights. Screen Capture for reference given below.

AjitKumar · ‎Dec 30 2021

Hi @ArshadSafrulla I had a similar experience onMX. We recorded the overall process of resetting, showing the LED status etc. We got the RMA for same.

AjitKumar · ‎Dec 2 2021

Hi @Mzamo I believe the process remain same as in reaching Meraki Support. We may call them / raise a case from the Dashboard.

AjitKumar · ‎Aug 18 2021

@hollowpoints Both MX and MS are independent product and they do support RADIUS. Hence I do not see any challenge. I understand your design should be good to go.

AjitKumar · ‎Jul 27 2021

Hi @merakifr Meraki Switches offer following Licensing Types Enterprise (https://meraki.cisco.com/product/switches/switches-licenses/switches-enterprise-license/ available for all switches Advanced (https://meraki.cisco.com/product/switches/switches-licenses/switches-advanced-license/) only for MS390 Model There is no per feature Licensing in Meraki. You get all the features with the license.The L2/L3 features available for the specific model will be enabled with Enterprise License. Hope this answers your query.

AjitKumar · ‎Jul 16 2021

Hi @Marsrock2021 , May be we can use the idea of filtering the VLAN at the switch port page (there are various parameter) Switch -> Switch Ports

About AjitKumar

AjitKumar

Ajit

Community Record

Badges