Meraki

RWelch

Congrats to all 👏 👏 👏 It’s fun to be part of the community, participate when possible and learn/grow from others.

Einstein

I do. It is set at 1gig/1gig. Speed is worse today after firmware to 211.4. Now only getting 500/200. I am only one in the office this morning. It is on primary WAN. 20-foot Cat6 from Verizon DMARC to MX250. I have lowered IDP/AMPsettings to see if that had any effect, it did not. Throughput on dashboard says 800, but is that both ways? Tests from Verizon say 800/600. No one is complaining about speed but just trying to stay on top of things. Like many of you, I am a 1-man department managing over 100 Meraki devices......lol Thank you everyone, have a great day.

Einstein

We do have some port forwards for several servers, but nothing forwarded to this server. We run some client VPN connections; NO-NAT is not enabled. No local users have rights to this server. Just very odd that the IP, FQDN of this IDS alert resolves to dhs.gov on AWS. These events were just Monday and yesterday. Nothing today. I did upgrade firmware to 211.4 last night, may have fixed that issue but not our speed issue. Our internet speeds are still very low coming through our MX250. I might open a ticket today. We have gig/gig fiber. Before new firmware we were getting 900/200. Today I am getting 500/200. Not good.

Roey1984

Thank you so much for assisting appreciate it buddy

RWelch

Firmware update alerts for non-existent devices

RWelch

Windows 11 in S mode is designed for security and performance, exclusively running apps from the Microsoft Store. If you want to install an app that isn't available in the Microsoft Store, you'll need to switch out of S mode.

PhilipDAth

Also note that Trusted Access certificates are only good for 2 years, and must be re-deployed then.

CptnCrnch

There are solutions like "UDP-Multiplexers". I've been using them e.g. with customers implementing Secure Network Analytics. Simply switch over to their Flow Replicator that forwards Netflow to different destinations. Something like https://github.com/thomseddon/udp-replicator would even be a very sleek solution - and Open Source too.

RWelch

Only the first WAN interface is supported on MXs in passthrough mode. Connecting other WAN interfaces is unsupported and may cause connectivity issues. Passthrough Mode on the MX Security Appliance and Z-series Teleworker Gateway

RWelch

PhilipDAth

Happy New year to everyone.

PhilipDAth

This is the answer. You are measuring a difference in CPU performance, not Internet performance.

Jujubee

Awesome explanation. Thank you.

CarlosI

Thx. Systems manager > Monitor > Command line working well, Live Tool - Command line from machine (System manager > Devices) is not.

jimmyt234

How is this still the only place that 18.212 exists 🤣

cmr

😬

grebyn86

Thanks everyone for the input. I believe this is the direction we're going. It will be at least a few days before we begin moving forward with this. So if anyone still has an opinion let me know.

MattMedix

Okay, that helps. I may have to reconnect the MS350 and check the factory reset protection setting, but it’s probably best if I do that with support accompanying me. Thank you.

cmr

+1 for solid waste storm 🤣🤣

wloper

Hi all, it was a layer 1 issue. Cable wasn't terminated correctly. It was showing as power granted and recognized the device as Meraki AP, but when I used a cable tester I saw pin 1 was no good. Re-terminated, dashboard found it right away. Thanks all.

DarrenOC

@Romie - which MX are you using? What’s the size of your internet connection? You have 200 employees but how many devices are they each bringing onto the network each day? What’s the CPU looking like on the MX when your users are experiencing wireless issues?

PhilipDAth

ps. You can have your SAML provide pass anything for the username, such as sAMAccountName or displayName. If you don't pass an email address you avoid this issue of existing accounts.

PhilipDAth

Photo drivers licence, passport, photo Government ID, ...

hrics12

Yupp! So my current plan is to create a trigger for when an email alert is received for a network being down. This trigger will set off an API call to check the uplink statuses for each network. I'll then parse the JSON and record when the uplink status is non-active. Not super intuitive but should produce some data. Figured I'd share this work around incase anyone else runs into this issue.

PhilipDAth

No.

About RWelch

RWelch

Community Record

Badges