Meraki

Brash · ‎Jul 15 2024

A lot of people swear by rackstuds for racking anything lighter than a server or UPS. I personally haven't used them and especially wouldn't in a production environment until I've tested them in my own lab. Assuming this isn't a homelab or a small test lab, I wouldn't risk it. Cage nuts suck but they're at least fairly reliable.

Brash · ‎Jul 15 2024

I'm liking these features. I'd argue DOM should have been implemented way earlier than now but it's exciting nonetheless.

Brash · ‎Jul 15 2024

What are you using for your RADIUS server? We have upgraded our fleet to 30.7 and are using RADIUS authentication without issue.

Brash · ‎Jul 12 2024

According to the installation guide it comes with the power adapter (DC power brick) but not the cable that connects it to your mains power. https://documentation.meraki.com/MX/MX_Installation_Guides/Z4_Z4C_Series_Hardware_Installation_Guide#Package_Contents

Brash · ‎Jul 11 2024

Security vulnerabilities for meraki devices are also filed under Cisco PSIRT https://sec.cloudapps.cisco.com/security/center/publicationListing.x You can filter on Meraki devices in the listing. You can also set up to notifications at https://www.cisco.com/c/en/us/support/web/tools/cns/notifications.html You can setup

Brash · ‎Jul 9 2024

There's a few ways. Under Network-wide -> clients, you can filter for "connected to" in the search box and filter for the switch you're looking for. You can also add "port" as a table column. Another way is to go to the switch itself (Switching -> Switches -> Select the switch), and go to Tools and click "Run" for MAC forwarding table Another way is to go to the switch port (Switching -> Switches -> Select the switch -> select the port), and scroll down to "Current clients" for the port

Brash · ‎Jul 9 2024

Nothing that granular or complete. Switch average power usage can be seen in the Organization -> Summary Report page. Memory and CPU utilizations cannot be pulled up from the dashboard or API, but Meraki support does have access to these stats in the backend (at least to some extent).

Brash · ‎Jul 9 2024

Yeah I wouldn't expect it to be categorized as malware. They would likely pull from the same sources that other security vendors/firewalls pull from anyhow.

Brash · ‎Jul 9 2024

Take some captures to work out where the communication is failing. One thing specific to SCCM PXE boot that might apply is the following: Don't use DHCP options 60, 66, or 67. It isn't supported. Advanced troubleshooting for PXE boot issues - Configuration Manager | Microsoft Learn

Brash · ‎Jul 8 2024

Closing off my experience on this. The MX75 I opened a support case for rebooted for a different reason. However support confirmed that a different MX75 had encountered hardware panic reboots and required replacement.

Brash · ‎Jul 8 2024

Confirming here that after the backend configuration was removed, we re-implemented and routing works as expected: - Internet bound traffic flows to Umbrella via the SIG Tunnel - Internal traffic flows across the AutoVPN to the Hub

Brash · ‎Jul 3 2024

Data structures starting at zero - the software developers' old nemesis. 😂

Brash · ‎Jul 3 2024

No comment on the content filtering specifically, but one thing to note about firewall rules is that when using an FQDN, the MX must intercept a DNS lookup for that domain before the rule will apply. For example, if the client already has the domain resolved in its cache and you add the firewall rule, the rule won't apply until the MX see's a DNS lookup for the domain. Solved: Meraki MX Firewall with FQDN - The Meraki Community

Brash · ‎Jul 3 2024

It's utterly ridiculous aye

Brash · ‎Jul 3 2024

Given there are specific IP and port requirements for MX cloud connectivity, I would expect the MX could at least connect to the cloud backend without DNS. That said, I've never tried it. In regards to not being able to use Umbrella anymore, if you're a paying customer and have purchased Umbrella licenses, talk to your Meraki rep to understand what the plan is for the service in those counties.

Brash · ‎Jul 3 2024

During the time that the computer is saying there's no Internet connection, it would be worth doing some tests: - Does the VM have an IP? - if so, what can you reach via ping? This can help identify where you're connection is stopping. - if not, you're troubleshooting a DHCP issue and need to do some captures or look at the DHCP server logs to see where the DHCP requests are being lost.

Brash · ‎Jul 3 2024

Yes, it supports meshing. It doesn't seem to be explicitly stated in the datasheet but as per the installation guide: "If used in a mesh deployment, the CW9163E should have a line of sight to at least two other Meraki devices." https://documentation.meraki.com/MR/MR_Installation_Guides/CW9163E-MR_Installation_Guide

Brash · ‎Jul 2 2024

When the MX's move to the new network, they will contact the Meraki VPN registry with the new public IP. The registry is then responsible for updating all of the remote sites to establish tunnels with MX's on the new public IP address. There's some additional information around this in the below doc. https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/Meraki_Auto_VPN_General_Best_Practices#VPN_Registry_2

Brash · ‎Jul 2 2024

As you identified, the management vlan is different from the default vlan (or switch-wide native vlan). Your original issue sounds like it's because with all of the native tagging, the packets being sent to your AP are having their vlan tag stripped and are therefore arriving untagged whilst the AP is expecting tagged packets. You'll need to find where is the most logical place to tag traffic (using switch port native vlans or management vlans & SSID tagging).

Brash · ‎Jul 1 2024

Assuming you don't have every network templated, the API is definitely the way to do it. With that said, you might be better off looking at an integration such as SplashAccess, Cloudi-Fi or Cloud4Wi (to name a few) to manage that kind of thing automatically.

Brash · ‎Jul 1 2024

Broadcast filtering/storm control is a bit different. It's used to limit the amount of broadcast traffic that a given port will receive and process. This prevents broadcast storms from bringing down the network.

Brash · ‎Jul 1 2024

Congratulations to everyone who contributed this month (great or small). And congratulations especially to @stgonzo, @MauroF and @PaulF @cmr - "and us twelve disciples" literally had me burst out with laughter.

Brash · ‎Jul 1 2024

MerakiMinute is great. Thanks for creating these videos - they've been very helpful.

Brash · ‎Jul 1 2024

That guide contains all of the information that should be required. You'll need to provide some more information to pinpoint. For example, does the client connect at all and prompt for credentials? If so, what do you see in the event logs on the NPS? Does the request show as hitting the correct policy?

Brash · ‎Jul 1 2024

Love it! Good luck Everyone! Get posting/Kudo'ing!

About Brash

Brash

Community Record

Badges