Meraki

Michal_Gurbski · ‎Mar 29 2024

Q: Did you have to reach out to your Cisco Meraki rep to unlock this? A: No Try to use -> Under Organization > Administrators - > new section -> Update camera and sensor permissions

Dunky · ‎Mar 15 2024

Thanks Ryan, I will have another look a lot closer next week then 😀 Are you able to share any timescales around SSO support for Meraki Display?

progman12 · ‎Feb 27 2024

Unless you have SSO only, you can add single users even with external emails . Go to Organization/Administrators and add one. Sends a verification link. That's what we did. Still looking for the rotating wall. Once it gets that, things will be great.

Dunky · ‎Jan 24 2024

Thanks Philip, that looks like a great solution. I will investigate pricing and look into a trial to confirm it will achieve what we need.

Dunky · ‎Jan 2 2024

Really?, wow that is not good then. It doesn't matter too much for me as we send traffic from guest subnets over WAN2, it was more to limit the bandwidth from guests on WAN1 when WAN2 failed. Yet again, another reasonable feature that's not available on the MX, it does make me question whether the MX is really fit for purpose as a firewall.

Dunky · ‎Dec 27 2023

Ahhh finally!!! Thanks for sharing 🙂 Yeah, roll on the same info for MT etc. although I see MR is due imminently...

VickyM31 · ‎Dec 22 2023

The prospect of an Industrial Ethernet Switch within the Meraki family sounds promising! For a comprehensive approach to developing and communicating product roadmaps, check out this resource that offers valuable insights and tips: https://www.cleveroad.com/blog/how-to-build-a-product-roadmap/

Dunky · ‎Dec 1 2023

I have tested giving the user R/O access to the network that the cameras are in, and yes that ensures that the floorplan shows correctly in the Vision Portal. The problem is though that these are just users - they will just get confused with seeing AP's, switches, Security appliances etc. So its not something we can enable just for the cameras to show correctly on the floorplan. The Google maps display is of no use - it shows cameras in the middle of the river - not having the display at all would be better than the google map without a floorplan to show where the cameras actually are. The site would use this to show contractors where the cameras are physically located when they need maintenance/replacement. I will therefore leave this as-is and submit a Feedback form on the dashboard.

Ryan_Miles · ‎Nov 30 2023

A Camera only admin shouldn't even see the delete button on Exports page. I'm guessing you're also a read admin for the Org or Network? In that case it does show the delete button, but fails to delete as you mentioned due to lack of permissions.

TyShawn · ‎Nov 29 2023

Just to close the loop with the community I spoke with @Brennan_Martin offline so we could clearly workout what each of us was attempting to say. At this point we are on the same page and I want to thank him for the time he spent with me today.

Dunky · ‎Nov 28 2023

I waited until the switch showed that its config was up to date. The feature just isn't working - changing the VLAN list against a group name in the default profile does not actually change the allowed VLANs on the switchport - you have to go into the port config and select the group again. The port and switchports displays then show the correct VLANs. I've raised a case, so will report back.

KarstenI · ‎Nov 23 2023

Yes, it's still the same situation. I assume everything regarding extranet VPNs has no priority at Meraki, which is sad as I don't know a single customer who doesn't need this functionality.

Dunky · ‎Sep 19 2023

I must say that was a very very pleasant surprise when I logged on this morning, its really good to know that this forum is taken notice of. I have reached out to Han as David recommended on the other issues around being able to specify which sensors (defaults to ALL), and the visibility of the 'Download' button. Thanks again!

RaphaelL · ‎Aug 17 2023

I can upgrade from MX15.44 to MX18.107.4 without going to MX18.107 : Support told me : "This was previously a bug not a feature but was a bug for so long that it was added to documentation, I believe it has since been resolved and you should be upgrade to the patch version directly." Which then I asked to rectify the documentation if the firmware barrier is no longer a thing. To be continued.

PhilipDAth · ‎Aug 16 2023

You need Meraki support to fix that. It doesn't take long usually.

Dunky · ‎Aug 11 2023

After raising a support case I got a really helpful response and explanation as to why they publish the dst as ANY as per below: Thanks for getting in touch with us here at Cisco Meraki! I'll be happy to provide support on this case. So for the MV Cloud Archive specifically, it's port 443 you'll want open outbound on any upstream device. The destination catch-all of any I believe, is shown because it will change based on where you choose your organisation's location to be and thus the corresponding data centre, details found here: https://documentation.meraki.com/General_Administration/Organizations_and_Networks/Creating_a_Dashboard_Account_and_Organization#Organization_Region_and_Data_Storage Depending if you fall into APAC, EU, or NA data centres the destination IP for archival you require may differ but here is a list of potentials depending on your config: APAC - https://cloud-archive-upload.apa.vision.meraki.com 13.112.106.253 EU - https://cloud-archive-upload.euc.vision.meraki.com 3.65.231.194 NA - https://cloud-archive-upload.use.vision.meraki.com 3.225.48.233 Please note, our recommended, supported configuration is for the destination to be set to any so please bear this set configuration in mind for any future troubleshoot. Wishing you a good weekend, let me know if I can assist further! I have used the relevant FQDN as the dst as I did an NSLOOKUP and got a different IP so I guess there is more than one dst IP for the FQDN.

Dunky · ‎Aug 11 2023

Did you ever resolve this, I have the exact same issue. Non-meraki VPN to Azure is down but absolutly nothing in the event logs

Dunky · ‎Aug 9 2023

Will MA-PWR-ETH not do the trick, is says its for MV2 and MT.

Dunky · ‎Aug 8 2023

Should have read more before I posted - just seen another thread saying the MT and MR have to be in same network. That isnt going to work as the user needs to be full admin in order to download the logs for auditing accreditation purposes. I do hope Meraki sort this soon as I can see them moving away from Meraki if we cannot give them access/

Dunky · ‎Aug 4 2023

Thats great, many thanks. It sends every flow to the syslog server rather than just the ones Ive ticked the syslog box for though, but not an issue (other than generating unnecessary traffic), I've just filtered on the syslog server to show those where message contains "deny"

GIdenJoe · ‎Aug 4 2023

I also noticed no support for port-security in the port-profiles setting.

Dunky · ‎Jul 5 2023

Apologies for delay in responding, I have been on hols. All looks good now, thanks Alex.

TBHPTL · ‎Jun 30 2023

Any particular reason why the MT40's aren't included in the canned automations?

Dunky · ‎Jun 23 2023

I use Visual Syslog Server for Windows (maxbelkov.github.io) [which is free] installed on an on-prem PC/server and does not have any bandwidth restrictions.

Dunky · ‎Jun 1 2023

I could do every time I download the xlsx to email to the users (cos its not possible for give a user r/o access to just the Sensors), but i would have to do this every time for every Sensor. It just seems madness that the downloaded data doesn't show the local time of the network in which the sensor sits) - or even give u the option of local timezone or UTC.

About Dunky

Dunky

Community Record

Badges