Meraki

athan1234 · ‎Nov 10 2022

Although I attempt to understand, I am unable to do so. I am aware that there is usually some explanation concerning networking. I adjusted the IP, and everything appears to be operating normally now. Who does possible if I modify the AP's static IP to function properly. The client's circumstance is as follows: He has a Radiaus range /22 Ip permission that connects to his provider with a range /22 permit for his firewall. It appears there is no discrepancy, and the radius is fine.

GreenMan · ‎Nov 9 2022

If your MX is using site-to-site VPN, check that it is configured for Automatic NAT traversal. If it is set to manual, you may need to change the config, to reflect the new IP. Chances are it will be automatic - that's the default and most people leave it that way https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#NAT_Traversal

cmr · ‎Nov 8 2022

Thanks @kbyal that makes sense.

Owen · ‎Nov 8 2022

I agree with you.The MX product line has stagnated. The simple fact is that Meraki MX devices aren't suitable for all deployments as a firewall. They certainly have their place and for many customers they fit very well in certain sections of the network but they can't be installed everywhere.

alemabrahao · ‎Nov 8 2022

This is very subjective, if we are going to talk in terms of RF, the ideal would be to disable it so as not to be "polluting" the air. But that doesn't mean it will necessarily cause any problems. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/security/configuration_guide/b_sec_3se_3850_cg/b_sec_3se_3850_cg_chapter_010110.pdf https://meraki.cisco.com/blog/2017/09/rogue-access-point/

Se20999 · ‎Nov 8 2022

thank you!!

Brash · ‎Nov 7 2022

You can certainly do this. You can use an MX as your router/gateway and connect your AP directly to it (either from a PoE port or with a PoE injector). You can then mesh other AP's from this one. I suggest looking into the advantages and disadvantages of meshing however as there is throughput and airtime impact to going down this route. https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/Wireless_Mesh_Networking

Brash · ‎Nov 5 2022

What version of windows server were you running before and what version have you upgraded to? Also, what version of MX firmware?

cmr · ‎Nov 5 2022

Our ticket was also not updated so I've chased, as we're no further forward in knowing what the next steps are supposed to be 😡

cmr · ‎Nov 3 2022

@Brash there wouldn't necessarily be any downtime. We moved 14 MR52 APs from one org to another (we had bought another operation) and most moved with clients remaining connected... Which surprised me! 😎

PhilipDAth · ‎Nov 3 2022

What are you using as the gateway fore the VLAN?

PhilipDAth · ‎Nov 3 2022

Try using the local status page on the MR and see what it is reporting. https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page#MR_Series Is it able to get an IP address? Is it configured for a VLAN for management, but the switch does have a compatible configuration? Is DNS working? If any of the above three is broken you'll get no traffic at the firewall level.

Brash · ‎Nov 3 2022

A quick test of enabling 802.11w on an said didn't log it as a change. Instead, it logged the change as "SSID PSK - value did not change". Its feasible that it was enabled at the same time as other configuration was changed on the SSID (enabling/disabling, PSK change etc) and therefore the change got logged as that.

PhilipDAth · ‎Nov 2 2022

Are you supplying 802.3at power (rather than 802.3af) to the MR42? I don't remember clearly now, but some models disable some functions when they only get 802.3af power.

CptnCrnch · ‎Nov 2 2022

If you're not buying an Enterprise Agreement (EA), you won't need that speicifc license.

bluegreene · ‎Nov 1 2022

We're still testing but this appears to be working. Allowing domain joined machines to join. How do we go about doing the same on iOS and iPadOS devices? We currently use Intune as or MDM. Thanks!

Polymathink · ‎Nov 1 2022

I'd like to thank the academy....Hey, is this thing on?

bluegreene · ‎Nov 1 2022

This confirms what I suspected. Thanks!

pdeleuw · ‎Nov 1 2022

Thank you, @Brash, for confirmation.

Brash · ‎Oct 31 2022

"From a one armed concentrator you can advertise any route (more specific of unique) you want to exit that concentrator." Spot on. I completely forgot that you can define networks on a one-armed concentrator without them being local to the MX. That fits into the design perfectly. "Can you get a static IP address for each spoke - that might be the easiest option." I agree this is the cleanest and my preferred option. However I'm preparing should we not be able to go down that route (which seems to be a distinct possibility) Thanks for the quick responses!

IainW · ‎Oct 31 2022

Just a quick update but it looks like it was either the Meraki shards I was connecting to or my ISP having a funny five minutes. Tested today across several customer networks from home and our office and all is good. Thanks everyone for your helpful replies.

alemabrahao · ‎Oct 31 2022

AmyReyes · ‎Oct 31 2022

Hi Folks, just a heads up that we are experiencing some access issues with the self-study guide. The team is aware and is actively working to resolve it ASAP. For now, you may be asked to sign in and then denied access if you try to view it. Opening the link in an incognito window seems to work as a workaround, but your mileage may vary 🙂

Brash · ‎Oct 30 2022

"All Network Admins" are all Full and Read-only administrators of a given network. It does not include Organization Admins Alerts and Notifications - Cisco Meraki Edit: Corrected answer with link to doc.

Guac55 · ‎Oct 30 2022

What is my option if I don't want to use ISE?

About Brash

Brash

Community Record

Badges