Meraki

AjitKumar · ‎Jul 28 2019

Hi @SCC With no experience with Meraki Cameras. Do you think creating "Video Walls" will be of some help? Hope you have read the following documentation. https://documentation.meraki.com/MV/Advanced_Configuration/Video_Walls

AjitKumar · ‎Jul 28 2019

Hi Richard, Allow me to reiterate 1. You have changed the Port on the switch CRC remains 2. You have changed the RJ45 Jacks on both the ends of cable CRC remains (Cable remains same) As you know most of the time CRC errors is usually the result of collisions or a station transmitting bad data. How about trying these too. 1. Try to negotiate the Port Speed Manually if already not and check the CRC 2. Try connecting a Laptop in place of the printer and check the CRC 3. If possible bring the Label Printer closed to switch. Try connecting with a different cable ( 2/3 meter patch cord). May also repeat the step 2. I hope you may get some answers.

AjitKumar · ‎Jul 28 2019

Hi James, I understand "Clone from existing network" may be the method to start with. There after you may tweak few settings on the newly created network. I hope you have read the following documentation on this subject. https://documentation.meraki.com/zGeneral_Administration/Organizations_and_Networks/Cloning_Networks_and_Organizations_in_Dashboard

AjitKumar · ‎Jul 26 2019

Hi @RDHORTA Please go to Security & SDWAN > SDWAN & Traffic Shaping > Uplink Selection > Flow preferences > Internet Traffic [Specify the desired configuration]

AjitKumar · ‎Jul 26 2019

Hi @CBM I had a similar experience at one of the client place. Upgrading the Firmware resolved our issue. You seem to have MS 11.22. Looks fine though .. How about downgrading this to 10.45 just for test? If no improvement. May I suggest you to reach support.

AjitKumar · ‎Jul 25 2019

Hi Hitesh Along side to what @ww suggests. You may consider the Solution 2 too. You may also consider to Add another MX84 in the Topology and Let your 2 ISPs terminate there. This gives you complete visibility of your network allowing you to utilize all the links simultaneously. Having said that ideally 2 good ISPs is a better option. You may consider avoiding 3rd ISP to keep the architecture simple. Also 1200 Users Load on MX84. I am not sure if you will be interested in doing this.

AjitKumar · ‎Jul 24 2019

Hi @zrunner626 I have not seen any of our clients wireless network with this behavior. As @PhilipDAth suggested "Block all access until sign-on is complete" should do the job. A piece of information from the below url says Once a device is authorized this method will not ask for authentication again for the permitted duration. May be your devices are already authorized. Could you verify this please? https://documentation.meraki.com/MR/Encryption_and_Authentication/Sponsored_Guest If a user disconnects and reconnects within the approved time, the device will automatically get internet access. If the user reconnects to the SSID after the approval period is expired the whole process will be repeated again. This function is currently limited to a maximum of 1 day (24 hours) per authorization. Note: Devices that have been authenticated for a specified duration cannot have their authentication manually revoked, and admins will have to wait for the authorized duration to end for access to expire. Devices are authorized by user accounts, and authorization applies to any device using the approved credentials.

AjitKumar · ‎Jul 24 2019

Hi @Mostofa You have various methods of on-boarding Guests on Meraki Wireless Networks Click-through Sponsored guest login (Preferred Option 1) Sign-on with Meraki Authentication (Preferred Option 2) Billing [Vouchers based access] You may choose any of the above options considering your organization policies. If you want to use vouchers/ coupons please check the following Url [You have all the steps to configure SSID and create vouchers] https://documentation.meraki.com/MR/Splash_Page/Configuring_a_Prepaid_Card_Billing_SSID

AjitKumar · ‎Jul 23 2019

Hi @samgbuyi You may consider enabling DHCP Snooping on switches and stop unauthorized DHCP Servers in your network.

AjitKumar · ‎Jul 22 2019

Hi @RumorConsumer I believe this may not be possible. For every MX Model there is a different kind of License. MX65 License cannot be used for MX84. You are right for warm spare one should have similar unit of hardware. However you do not need 2 Licenses for HA as the mode is Active - Standby. Hence 1 License will do. Having said that in your case this may not be of any help as the Hardware's are of 2 different models. Regarding configuration backup I do not see much options available. The thread you are referring to shares appropriate information while replacing MXes. I believe @PhilipDAth had a script to download the configuration. I am not very sure though.

AjitKumar · ‎Jul 22 2019

Hi Shawn, I do not see much challenges with DIA. They are pretty reliable and they offer you uptime SLA, we have certainly good service providers here in India. Airtel & Tata to name a few. Having said that "You may consider 2 Links from 2 different Provider" and have a nice SDWAN Configuration. Added to this you may consider MPLS link too. However I do not see a great advantage here. Perhaps it all depends on how critical your services are.

AjitKumar · ‎Jul 22 2019

Hi @Screasey Greetings. I am getting ready to deploy a site to Chennai India. This is Ajit from India :). Let me know if you need any assistance. Is the MX device using DIA circuits reliable enough for this operation? DIAs are certainly reliable. There is an agreed SLA with the operator. Can I use an MPLS circuit in the MX device? Certainly you can use MPLS. You need internet service in the mpls circuit for MX to reach cloud and establish AutoVPN with other sites. I have a pair of MX 400's at the head end For HA.. You will need 3 IPs on each link .ie /29. Is it also possible to terminate an MPLS into the MX400? this would give me direct site to site. Hmmm. You may terminate MPLS on a LAN Interface by creating L3 VLAN. However internet is required for MX Management.

AjitKumar · ‎Jul 21 2019

Hi @Karlo_nico23 @MichelRueger suggested the following Idea.

AjitKumar · ‎Jul 19 2019

Hi @Kirillg88 With my Limited Knowledge I can think of following Connectivity. May be @kYutobi can suggest mistakes in this diagram.

AjitKumar · ‎Jul 19 2019

Hi @IsraelFilho Yes I saw a similar message from @Uberseehandel on Monday. Below the is thread https://community.meraki.com/t5/Dashboard-Administration/One-or-more-of-your-Meraki-devices-are-unable-to-communicate/m-p/53903#M1882

AjitKumar · ‎Jul 17 2019

Hi Pappaslim, The MAC address search suggests the vendor as Seagate Cloud Systems Kindly check the following Url https://aruljohn.com/mac/0050CC Are you having any Seagate NAS / Any other similar device in your network? You may consider rechecking the Interface configuration there. You may also refer the following Url for more information on VLAN Mismatch Events. https://documentation.meraki.com/MS/Port_and_VLAN_Configuration/VLAN_Mismatch_Alerts_for_Meraki_Switches https://community.meraki.com/t5/Security-SD-WAN/Source-IP-and-or-VLAN-mismatch-Internet-connection-issues/td-p/39822

AjitKumar · ‎Jul 16 2019

Hi @akkymylator If there are issues with Hardware. MR 16 comes with lifetime warranty. I understand the better idea shall be to RMA the hardware. For Firmware updates we can push this from the Dashboard. I do not see a need for backup / restore.

AjitKumar · ‎Jul 16 2019

Hi @akkymylator Could you please explain in detail? All the details for MR Devices are available on Dashboard at Organization > Firmware Upgrades.

AjitKumar · ‎Jul 13 2019

Hi @DPringle3 I believe we are missing some configuration. Could you please recheck the following? 1. DHCP Server is enabled on the MX VLAN ->Security & SDWAN->DHCP->VLAN-> Client addressing 2. The Port connected between MX & MS120 is in "Trunk Mode" ->Security & SDWAN->Address & VLAN-> Per-port VLAN Settings 3. The Switch Port at MS120 ->Switch->Switch ports->Switchport->Type=Access->VLAN= VLAN ID

AjitKumar · ‎Jul 12 2019

Hi@cisconovice77 Hope you have already referred this documentation. https://documentation.meraki.com/MX/Access_Control_and_Splash_Page/Troubleshooting_the_Splash_Page_Appearance Excerpts from the above documentation Web Browser Times Out Instead of Loading the Splash Page There are some circumstances where an unauthorized user will open up a web browser with the intention of hitting the Splash page to authenticate, but the web browser times out or fails to load the page. This will commonly occur when the user was attempting to access a web site via HTTPS. When the AP or security appliance sees an HTTP GET request from a non-authenticated user, it will redirect that request to its configured Splash page. If the user's initial request is using HTTPS, however, their request is encrypted and therefore cannot be redirected. As such, the request will time out. To troubleshoot this issue, the user should clear their browser cache and try to access any website using HTTP (at this time, bing.com supports the use of unencrypted HTTP). If the issue persists, ensure that the client has a valid IP configuration, and troubleshoot for other possible network issues. Blank Page Loads Instead of Splash Page Since Splash pages rely on cookies to function, a blank page will appear if cookies are not enabled on the user's web browser. This is most common on mobile devices, but can be configured on any modern browser. To resolve this issue, ensure that cookies are enabled in the web browser. Please refer to browser-specific documentation for details: Internet Explorer 9 Mozilla Firefox Google Chrome Safari for iOS Splash Page Loads but Post-Splash URL Doesn't On Android On Android devices running OS version 5.0 or later, the URL set on "Where should users go after the splash page" in Dashboard will fail to load successfully. This is an expected behavior of Android OS 5.0+.

AjitKumar · ‎Jul 11 2019

Hi May be because Enterprise License offers you complete VPN and SDWAN functionalities. Meraki calls it Enterprise. if someone visit the bad page it will not be blocked in Enterprise License ? You are correct. You need Content Filtering Feature for this.

AjitKumar · ‎Jul 11 2019

Hi @SCC I understand for better security one must apply Advance License. Enterprise offer limited functionalities L3 L7 etc. Kindly check the following Url for feature comparison between both the License types. https://www.syndicateinfo.com/post/what-is-the-difference-between-the-enterprise-and-advanced-security-licenses-for-mx

AjitKumar · ‎Jul 11 2019

Hi @GJ1 May be I am not able pick up your queries effectively. This is what I understand 1. To Assign IP Address to AP. We cannot do this from the Dashboard. You may connect to the Meraki Scanning SSID and access the local status page to put in the desired IP. You can also use DHCP and there after can update the IP from the Dashboard once the device is live. 2. Public or Private - IP assigned to AP should have access to Meraki Cloud. 3. If you have network admin rights to dashboard you shall be able to manage the network else no.

AjitKumar · ‎Jul 11 2019

@SCC Apologies that's TYPO Copy / Paste Mistake. 48LP (Low Power) - All 48 ports will be PoE with a Power Budget of 370W 48FP (Full Power) - All 48 ports will be PoE with a Power Budget of 740W

AjitKumar · ‎Jul 10 2019

Hi @SCC This is what I Understand. Meraki Switches P,LP,FP are "All Ports" POE Switches. However POE budget differs Ex. 24P - All 24 ports will be PoE with a Power Budget of 370W 48LP (Low Power) - All 24 ports will be PoE with a Power Budget of 370W 48FP (Full Power) - All 24 ports will be PoE with a Power Budget of 740W

About AjitKumar

AjitKumar

Ajit

Community Record

Badges