Meraki

Dunky · ‎Jul 23 2023

Yeah thats what I am gonna have to do, just thought it stramge why Meraki dont publish dst IP/subnets or FQDNs for one particular rule

Dunky · ‎Jul 21 2023

Thanks, I guess that will be uk.pool.ntp.org then for deployments in the UK.

Dunky · ‎Jul 21 2023

It's of no use to me if our ppl wont permit an ANY dst. Surely they must know what their devices connect to.

Dunky · ‎Jul 21 2023

The published rules for the MV's contain a dst of ANY as shown below: We are not permitted to have an 'any' dst - does anyone know if Meraki publish anywhere what the actual destinations are?

Dunky · ‎Jul 7 2023

Ahhh thanks Ryan, saves me opening a case then. Please to hear that the goal is to report the correct values 🙂

Dunky · ‎Jul 7 2023

I'll do that and see what they say 🙂 Will revert back when have an answer

Dunky · ‎Jul 7 2023

OK, thanks. I still think its misleading, I will have to tell our ppl to ignore what the Switch Ports display says in that case as they are so used to it, and its only correct if there isn't a profile applied 😉 I wonder why Meraki decided against displaying the actual active values in this display, I cant think of any logical reason not to?

Dunky · ‎Jul 7 2023

I have switchport that was originally configured in VLAN 1. I have now applied a port profile (Early Access feature) which puts the port into VLAN 10 and enables the port. However the Switching>Switchports screen still shows it as VLAN 1 and disabled as below: These are the original/profile settings: I find this very misleading as the VLAN/port state is showing as incorrect as they are overridden by the port profile

Dunky · ‎Jul 5 2023

Apologies for delay in responding, I have been on hols. All looks good now, thanks Alex.

Dunky · ‎Jun 23 2023

I'm still getting thousands of these daily - is there a timeframe for whey TALOS are removing?

Dunky · ‎Jun 23 2023

I use Visual Syslog Server for Windows (maxbelkov.github.io) [which is free] installed on an on-prem PC/server and does not have any bandwidth restrictions.

Dunky · ‎Jun 23 2023

Agreed, we use Meraki Insight to provide these alerts. It's also great in alerting to packet loss (we then check against a number of ping destinations to confirm that it is genuine loss on the circuit and not to a specific dst IP that is defined in the SW-WAN & traffic shaping config in the dashboard for that MX).

Dunky · ‎Jun 22 2023

Great news, I'm pleased that Meraki have acted on the concerns raised by all in this thread that this was not suspicious traffic.

Dunky · ‎Jun 21 2023

I saw 3,500 hits yesterday with the sources being Edgecast, HWCDN and Limelight Networks. I don't see how these can all be related to Kaspersky?????

Dunky · ‎Jun 20 2023

Doing reverse lookups on some of the IP's shows a mixture of many sources - windowsupdate.com, Verizon Business, Limelight Networks. Not sure if that helps but to me it indicates these alerts are nothing to do with Kaspersky. We don't even have Kaspersky installed anywhere.

Dunky · ‎Jun 17 2023

We've started getting loads of these too: We are running 18.107.2 and the alerts started on 13th June which by coincidence(?) is when we started rolling out 18.107.2 (from 17.10.n).

Dunky · ‎Jun 15 2023

Quite possibly, tbh I've never looked at this. Having said that though I still think the preferred option is to have a SAML role that gives a user access to the Sensors only so they can see alerts, download reports etc. basically everything other than configure the sensors/alerts. I will add MQTT to my list of things to look at, thanks.

Dunky · ‎Jun 1 2023

I could do every time I download the xlsx to email to the users (cos its not possible for give a user r/o access to just the Sensors), but i would have to do this every time for every Sensor. It just seems madness that the downloaded data doesn't show the local time of the network in which the sensor sits) - or even give u the option of local timezone or UTC.

Dunky · ‎Jun 1 2023

Surely the time should be derived from the timezone of the network in which the sensor resides.

Dunky · ‎Jun 1 2023

Is it possible to get the download to convert the times to local time? When I download readings for the month from an MT11, it is confusing as each row in the xlsx shows UTC time rather than local time.

Dunky · ‎Jun 1 2023

I've marked this as the solution solely to keep the board from having unresolved topics. We are still trying to identify what these 2 clients are, each are failing association approx 2,800 times/24hrs!

Dunky · ‎May 25 2023

A sensor that had multiple outlets on it thus allowing us to remotely power-cycle devices would be awesome. I can see it being expensive to deploy multiple MT40's to a site especially with the licencing. I would love to get rid of the Schneider IP PDU's !!

Dunky · ‎May 25 2023

Thanks, I will attempt to find out, although all I have are MAC addressed, its not showing the host names which may make it difficult to track them down.

Dunky · ‎May 25 2023

Can anyone tell me what error code 31 actually means, I cannot find any reference to it online. This is the failure reason I am seeing in the Connection Log: auth_mode='wpa3-psk' 11k='0' 11v='0' error_code='31' radio='0' vap='0' channel='1

Dunky · ‎May 24 2023

Any updates on this. We will shortly be implementing MV's at one of our sites, and they want a videowall in the factory. That isnt going to work if it keeps logging out. Or maybe the Vision Portal has a different idle timeout that can be set to never logout?? TIA

About Dunky

Dunky

Community Record

Badges