Meraki

DHAnderson · ‎May 18 2021

@Inderdeep The are on a small campus where buildings are across the street from each other.

DHAnderson · ‎May 18 2021

My cell phone had the Meraki dashboard page open from earlier today, and I can refresh the page and see live data. I had a client go down (4 sites) at the same time. It look like a fiber got dug up in their area. -Dave

DHAnderson · ‎May 18 2021

I am getting a Server Error when going to the Meraki dashboard. Is anyone else seeing this? -Dave

DHAnderson · ‎May 13 2021

I have used both FortiGate and Meraki. If you only want a high speed firewall, FortiGate is a good way to go. If you manage more that one firewall, switches, access points, cameras and other devices, Meraki is the way to go, especially if you manage more than one site. Meraki is hands down easier for day to day management.

DHAnderson · ‎Apr 26 2021

I don't know much about OpenWRT, but I presume drivers could be be written to support a security co-processor.

DHAnderson · ‎Apr 23 2021

I would think that it would be time to develop a pipeline processor for in going and out going inspection. A FPGA could be developed and tested before committing to a die. That would give you great inspection speed. We did that at another company I worked at and raised image inspection from 300 parts per minute to 14,000 per minute. Each stage of the pipeline could perform a simple inspection. We used a ARM processor to setup the pipeline, and to further refine the results from the pipeline.

DHAnderson · ‎Apr 22 2021

Forgive my ignorance, but how does 16.x enable the release of newer faster hardware? Or is that proprietary?

DHAnderson · ‎Apr 22 2021

I agree. Cellular companies have jumped into the ISP business causing a spurt of competition. We are seeing reasonable non symmetric near gigabyte speeds from some cable companies, and affordable symmetric speeds from companies in with fiber.

DHAnderson · ‎Apr 20 2021

I have a client in a similar position. We agreed to put their router on front of the Meraki and keep their equipment completely off our network. Sine they get into their equipment from.a fixed ip address over SSH, I like the idea of there being two different networks.

DHAnderson · ‎Apr 8 2021

@AlexanderN How do I get the beta on my access points? - Dave

DHAnderson · ‎Apr 3 2021

I was in the previous MR IPV6 beta (27.99). I have since joined the MX beta and put the access point back in that network. It reverted to 27.6. I would like to be in this beta so I can continue testing. Thanks, - Dave

DHAnderson · ‎Mar 31 2021

As others have said, the dashboard is the key. Visibility into your complete network stack, no matter where you are, no matter where equipment is, cannot be understated. Some switch specific benefits(no matter where the switches are physically): See all switches in a network in one view. See all ports in a network in one view. Drive down into a particular be port in a network quickly. Test a cable without being onsite.

DHAnderson · ‎Mar 31 2021

Have you tried the hairpin as referenced in @PhilipDAth comment? If nothing else, the proof of concept may give you more insight into how NAT can work in a MX. - Dave

DHAnderson · ‎Mar 21 2021

I am a Meraki Partner, and Meraki generally dies not talk about their future product plans, even to their partners That said, it would seem reasonable that they would be working on a 5G version. There are many hurdles, regulatory and with the carriers, so a turn around time is not likely to be very quick. On thing you could do check is to see if Meraki has devices in the FCC regulatory testing process.

DHAnderson · ‎Mar 21 2021

@CharlieCrackle The uplink port is set to allow VLAN 1 or all VLANS?

DHAnderson · ‎Mar 21 2021

@cmr , @CharlieCrackle is having issues with MS120, not MS125 I have lost a MS when the management VLAN set in the switch wasn't on the uplink port's allowed VLAN list. The switch was working, it just couldn't get to the dashboard. I wonder if the isn't something like that.

DHAnderson · ‎Mar 21 2021

I have upgraded MS120from 14.12 to 14.16 without me any issues. The switches are set to get their IP addresses form DHCP on a management VLAN. Are you switches on a the default VLAN, or one you specified?

DHAnderson · ‎Mar 15 2021

O365 was down due to Azure Active Directory having issues. That also brought Cisco Duo to send me this email subject line: Azure Conditional Access Authentication failures. It is truly the ides of March!

DHAnderson · ‎Mar 15 2021

I had just cooking hot dogs for lunch when my phone lit up. My poor hotdog boiled to death while I was pouring over email and making calls to clients.

DHAnderson · ‎Mar 15 2021

When you say the tunnels went down, did they actually go down, and no data could be transferred, or that the dashboard reported them down?

DHAnderson · ‎Mar 15 2021

My clients and tunnels are still up, otherwise I would have heard. They absolutely rely on Meraki, and not one of them have reported any issues. I even called on client and they reported everything was working. All of my clients absolutely rely on Meraki, and not one of them have reported any issues. My own equipment reported that it was down, but my home office kept humming along, with emails pouring in!

DHAnderson · ‎Mar 15 2021

Same here. Email messages still pouring in. I have clients in three different cities on several different providers. I stopped panicking as no clients are calling me saying they are down. It is interesting that the emails are in waves, switches, then access points, then cameras, finally firewalls.

DHAnderson · ‎Mar 14 2021

This is rather late update to this thread, but I have been installing Trend Micro Worry Free Business Services XDR for my clients. It has Endpoint Detection and Response, Hosted Email Security and Cloud storage security. I have witnessed it block ransomware. I deploy the client app via Systems Manager, so roll out to a new organization is easy.

DHAnderson · ‎Mar 14 2021

I have several clients using JumpCloud Radius authentication over Meraki access points. I have not seen the problem you have mentioned. One thing to check is that the WAN IP address is the same address specified in the JumpCloud Radius settings. Also, you can test the Radius authentication in the Access Control settings for the SSID.

DHAnderson · ‎Mar 13 2021

All of my clients are behind a MX. The clients with AD and an internal DNS server are not having that issue. I have the MX handling DHCP and setting the DNS addresses to the internal DNS server and to Google.

About DHAnderson

DHAnderson

Dave Anderson

Community Record

Badges