Meraki

DHAnderson · ‎Mar 20 2020

Brandon, You can reach out to Meraki Go Support and let them know what is happening. You can also reference case 04985040, and say the same thing is happening to you.

DHAnderson · ‎Mar 19 2020

I have been working with Eduardo in tech support on case 04985040: Network Usage alerts don't stop. Per my previous post, I have been waiting for a user to trip the notification threshold and see if I got a message (I shouldn't). Yesterday, a client used 9.5 GB and I did not get a notification. Notifications are turned off , so that is correct behavior. My Meraki Go App is version 2.8.0, build 417, revision e57bbfdc1. I use a Android phone, version 10, March security update.

DHAnderson · ‎Mar 17 2020

nikiwaibel I agree with your sentiment. But for a VPN to work over IPV6, the MX would need to have have IPV6 address management, subnet management, routing management and perhaps even 6 to 4 and 4 to 6 if your internal network is IPV4 only. The next update from Meraki on IPV6 will come in April. Perhaps there will be an Alpha or Beta then.

DHAnderson · ‎Mar 14 2020

On the Meraki Go App, click on the hardware icon, then select your firewall, and scroll down to the troubleshooting section. You can test the performance to any website you want. If you are looking for a system that will send you emails when performance to any set of sites drops below any threshold and let you know where the problem is (LAN, WAN or site), a Meraki Insight license with a MX series firewall it a great solution. Let me know if you want to see a demo of Meraki Insight.

DHAnderson · ‎Mar 14 2020

I do not see a way to do this at this time.

DHAnderson · ‎Mar 14 2020

Meraki Go equipment have a management page like the Meraki systems have. While this article is for an access point, it should work for a GX https://documentation.meraki.com/Go/Meraki_Go_-_How_to_Assign_a_Static_IP_to_an_Access_Point

DHAnderson · ‎Mar 14 2020

Skaminski I was having the same issue. I worked with Tech support and they turned off the notification on the backend, which solved the problem. A few days later they asked me to turn it back on to see if it recorded it in the back end, so i did and the messages started again. Then they asked me to turn it off again and see if they stopped. So far, there have not been any heavy users so I don't know if the problem is completely solved yet. Tech support has been excellent in debugging this. I suspect that there is / was a problem on the Server side of things, because my app has not updated during this testing phase.

DHAnderson · ‎Mar 9 2020

When the time comes, I would be interested in beta testing IPV6 for MX or other hardware. I have Charter as an ISP and when I was using a Soniclwall firewall I had four IPV6 subnets. The MR33 was able to get an IPV6 address from the Sonic wall, and devices in the WiFi also could get IPV6 addresses. - Dave

DHAnderson · ‎Mar 4 2020

My personal preference is to keeps things simple, until you can't. Planning a current network design based future maybes (not hard requirements) can increase cost, complication and reliability, without any direct benifit today. So my suggestion would be to set up the simplest design first, and plug the two WAN ports into the MX. Later, when you eventually (hopefully) get a warm spare, a more complex configuration is required. Just be sure you do not move your single point of failure from a firewall to a switch.

DHAnderson · ‎Mar 4 2020

When the MS250's uplink was connected to a Cisco switch, I needed to specify a native VLAN for MS250's interface for traffic to flow. I was assuming the Cisco router would behave in the same way, so when the MS250's uplink was connected to the router, it would need the native VLAN defined. Sadly traffic wouldn't flow. When I removed the native VLAN from the MS250's uplink port and connect it to the Cisco router, everything started working.

DHAnderson · ‎Feb 25 2020

This morning I got a chance to try changing the Meraki uplink port from a trunk to an Access port, but that did not solve the problem. Traffic still does not flow from the Meraki to the Cisco router. The Cisco router has this configuration for interface 0: ! interface GigabitEthernet0/0/1.120 description ** VLAN 120 ** encapsulation dot1Q 120 ip address 192.168.120.1 255.255.255.0 ip helper-address 192.168.0.3 ! interface GigabitEthernet0/0/1.121 description ** VLAN 121 ** encapsulation dot1Q 121 ip address 192.168.121.1 255.255.255.0 ip pim sparse-mode ip igmp version 3 ! Is the issue I am facing that there is no dot1q native vlan specified for the interface?

DHAnderson · ‎Feb 17 2020

There are 2 VLANs, one for voice and another for data. If I configure the uplink port as an access port, do I set the set data as the VLAN, and the Voice as the voice LAN?

DHAnderson · ‎Feb 17 2020

I am falling back from a configuration were I was going to use a Meraki MS250 switch to replace a Cisco router. There is a Cisco switch plugged into the Cisco router. If the MS250 is plugged into the Cisco switch, the MS250 can communicate to the Meraki cloud and everywhere else without any issue. If I plug the uplink of the MS250 directly into the Cisco router, no traffic flows. The configuration of the router does not have any mac address rules, but is not providing a native VLAN on the interface descriptions. I had a case where a MX84 would not pass traffic to a 3rd party switch until the 3rd party switch was reprogrammed to provide a native VLAN. I am wondering if I am facing the same issue. I have a dump of the configuration of the Cisco router, but I do not have management access to the switch. I thought I would bounce this off the community before asking to change the router configuration.

DHAnderson · ‎Feb 8 2020

It is unlikely that a small coffee shop or barber shop will have any servers or multiple devices that support DHCP. But these types of customers do take credit cards and therefore should be in PCI compliance. That means the credit card machines must be on a separate network from all other devices. The Meraki Go is aimed squarely at these types of customers. It is disappointing that you can specify a VLAN ID for a SSID, but that will break WiFi functionality on a pure Meraki Go stack. - Dave

DHAnderson · ‎Feb 8 2020

I am reposting this in the Questions and Answers forum: This is the first time I am getting time to play with my full stack of Meraki Go equipment in a while. I set up a VLAN on a test SSID today. When I try to connect to that SSID, I cannot get an IP Address. I cannot see anywhere to add another DHCP pool for the VLAN, or apply the VLAN to a port on.my switch or firewall. What am I missing? - Dave

DHAnderson · ‎Jan 21 2020

I looked at Air Marshal and there were 0 spoofs and 0 Rouge SSIDs. I went through all the Other SSIDs and did not see any matching the guest. I also looked at all Air Marshal events in the event log and there were no events. I have tested Air Marshal in the past and I am confident of it's operation. So, since all my other clients were on 25.13, I took the advice to downgrade to that.

DHAnderson · ‎Jan 21 2020

Nothing had changed in months, so there were no new config changes.

DHAnderson · ‎Jan 20 2020

I just had some strange and worrisome behavior happen at a client. The have a MR33 and called to say the Guest network is not showing up on people's devices. The Guest is configured with a SSID that has a password. It is not using Meraki Guest as the 10.0.0.0/8 overlaps with an internal network. When I went to their location, my phone connected up with the Guest network without any issue. I checked with other users and they could now also see the network, but there was no lock icon on their phones, indicating the SSID did not have a password. I told my phone to forget the Guest network, then I connected to it. I was not asked for a password. I repeated this twice to be sure a password was not required. I checked Meraki Dashboard, and Pre-Shared Key was still selected and the password was still showing. I checked Air Marshal but no Spoofs or Rouge SSIDs were found. There are no Air Marshal events for the last month in the event log. I rebooted the Access point and when it came back up, the Guest network password was working as it should. I have not seen this behavior before. The MR33 firmware version is MR 25.14 Has anyone else seen this?

DHAnderson · ‎Jan 14 2020

I have a client that is a small healthcare business. They have clinics two cities about 30 miles apart. They are connected to each other by a WAN link that the local hospital manages. In city A, there is the hospital and one of my clients clinics. In city B, both the hospital and my client have clinics. In city C, there is a Data center for both the hospital and my client. The hospital provides a WAN link between City A, B and C. In city A, my client has a MX84 providing internet access and static routes to the hospital WAN. In city B, my client has a Cisco router providing routes to the hospital WAN. I purchased a MS250 with the intention of replacing the Cisco Router in city B with it. Unfortunately, the Cisco routers are using eigrp routing protocol which the MS250 does not support. I am not sure of the best way to integrate the MS250 into the network. Any help or insights would be appreciated.

DHAnderson · ‎Dec 28 2019

To setup the client VPN on Windows 10: Click the Start button Click on Settings Click on Network and Internet Click on VPN Click on the Add VPN Connection Fill out the parameters on the Add VPN page Once the VPN is created, open the Control Panel and go to Network and Sharing center. Click on Change Adapter settings Right click on the adapter with the same name you gave your VPN in step 6, and select Properties Click on the Security Tab Data Encryption should be set to Require Encryption Select Allow these protocols Check all three protocols, but leave Automatically us my login name unchecked. Click the OK button Try to connect to the VPN

DHAnderson · ‎Dec 22 2019

@Matthew I am attempting to use a Meraki MS250 to replace a Cisco router that is using EIGRP. You mentioned you have a mixed environment. Since the MS series do not support EIGRP, how did your mixed environment work? - Dave

DHAnderson · ‎Dec 11 2019

It is now close enough to mid-December when another announcement is expected. Given the complexity of the task and the perceived glacial speed in progress, I am not expecting an early IPV6 Christmas present. It is sad though. Instead of dreaming about sugar plum fairies, I am dreaming of IPV6.

DHAnderson · ‎Dec 10 2019

Add LDAP support to System Manager Owners, so Cloud base Identity systems like JumpCloud can sync it's users with System Manager Owners.

DHAnderson · ‎Dec 10 2019

Under Security & SD-WAN / Addressing & VLANs, Per Port VLAN settings should move to a new page called Appliance Ports. The behavior of Appliance Ports should mimic the Switch / Switch Ports page in functionality. Along the same lines, there should be a Ports tab under Appliance Status that works like the Ports tab under Switch Status.

DHAnderson · ‎Nov 12 2019

I have a full stack of Meraki Go and Meraki equipment. The Go access point does not have scheduling or most of the features of a MR. That said, you can create an isolated guest network, set usage limits and get email notification when equipment goes off line. The firewall subscription gives you Cisco Umbrella, but you cannot disable content filtering. There is no Snort for traffic inspection, but there are layer 7 rules in the access point. The switches support POE, and cable testing, but not isolation. I know this is just a smattering comparison. Let me know if you have any specific questions. - Dave

About DHAnderson

DHAnderson

Dave Anderson

Community Record

Badges