Meraki

MilesMeraki · ‎Jan 18 2018

How do you have the HA arrangement currently configured, the WAN ports on these two devices should be different? The only use case I could see where they would be identical if you were using a Public static IP for the devices and directly plugging into your ISPs network.

MilesMeraki · ‎Jan 17 2018

As above, I'd definitely look at upgrading from an MX65 if you're going to have 700 active clients on the network behind the MX. An MX100/250 would suit you better, especially if you're using all advanced security features. I'd recommend reaching out to your Meraki sales rep who will be able to assist you with rightsizing your MX for your environment.

MilesMeraki · ‎Jan 17 2018

Me and @PhilipDAth are based in NZ. Happy to act as a contractor for a day and manually change the timezone on the IOS devices 🙂

MilesMeraki · ‎Jan 17 2018

Thanks for the update @CarolineS 🙂

MilesMeraki · ‎Jan 16 2018

If you're still unsure if it's the tagging issue a simple packet capture taken from the MX on LAN 1 would be able to prove if that is the case.

MilesMeraki · ‎Jan 10 2018

2018 Meraki Resolutions 🙂 - Alexa Integration with the Meraki API - Allow Alexa for voice control of the Meraki dashboard. Who needs a computer these days? - Meraki evangelize! Showcasing how networking infrastructure can be used to improve business insights and digital marketing by the power of Meraki networking! - Strong SD-WAN push. Cutting customers WAN costs, putting the power in their hands, not their Telco's. Showcase how easy SD-WAN allows the ability to modernize your WAN architecture for the cloud era. - Continue to help and promote the Meraki Community by sharing knowledge of Meraki. - Obtain more Meraki SWAG! - I'm starting to create my own little Meraki SWAG Museum!

MilesMeraki · ‎Jan 10 2018

Layer 7 Firewall rules on the MR and MX will not be capable of blocking these messages for this use case. As @DCooper has already stated, have a look into Systems Manager where you'll be able to apply profiles to IOS devices to stop these messages/notifications. - https://meraki.cisco.com/products/systems-manager Even better is Meraki allow you to create a Free Systems Manager network and try out the paid feature version for 30 days!

MilesMeraki · ‎Jan 9 2018

@TM_1 Glad you got to the bottom of it!

MilesMeraki · ‎Jan 8 2018

It sounds very much like you have a Rogue DHCP server on that VLAN. I'd take a packet capture on one of the ports on that VLAN to see what's sending out DHCP offers, find the port that the client is connected to and disable this port. You can also attempt the above troubleshooting too.

MilesMeraki · ‎Jan 8 2018

Disabling the port which the machine connects to is sufficient enough. This obviously stopping any form of possible network connectivity.

MilesMeraki · ‎Jan 7 2018

What's the purpose of the XP client? I'd isolate it via an Isolated VLAN and then block the client to the internet via a Meraki blocking policy, this would block outbound communication. The biggest question I still have though is why is it running XP and why can it not be upgraded?

MilesMeraki · ‎Jan 7 2018

No problem @Uberseehandel, glad that we could be of assistance. As @PhilipDAth has stated above, if you believe keeping VLAN 1 as the default Native VLAN as being insecure/vulnerable, change it to another unused VLAN number in your design, just ensure that you change the Native VLAN on all other links to reflect it.

MilesMeraki · ‎Jan 7 2018

Double tagging is the issue here. As @PhilipDAth has stated, the Native VLAN is 11 and the AP is using VLAN 11 for it's DHCP requests when the Native VLAN is already VLAN 11. As @PhilipDAth has mentioned, change the Native VLAN back to 1 and this will resolve the issue.

MilesMeraki · ‎Jan 6 2018

Hey @Nick_Barron, some great feature requests ideas there.I too also would love the ability for the MV cameras to send push alerts when motion is detected within a certain area. My recommendation would be to "Make a wish" Within dashboard for these features and also reach out to your local Meraki sales Rep if these features requirement are pending a sales deal. In regards to the Camera wall on IPAD, have you tried just using the native google chrome browser and logging into dashboard this way to see the camera wall?

MilesMeraki · ‎Jan 6 2018

My assumptions are that the error message is for the AP not the phone. How's the AP configured, is it configured to receive an IP address via DHCP? Make sure there is no VLAN tagging set on the AP's DHCP configuration as I assume it's already being tagged at the Switch port? (Double tagging could cause this error message)

MilesMeraki · ‎Jan 3 2018

Thanks, @CarolineS for the shout out and all the things that you do on the back end. It's great to be apart of a new thriving community which will only get bigger in 2018 🙂

MilesMeraki · ‎Jan 2 2018

Unfortunately, you're correct. RRM requires Cloud (Internet) connectivity. However, Meraki (MX) devices do offer quite a few options for internet connectivity to allow for extra Internet redundancy in case of a single ISP failure.

MilesMeraki · ‎Dec 30 2017

System Manager licenses RRP is around $40 USD per year. A great and highly recommended addition if you already have a Meraki network.

MilesMeraki · ‎Dec 29 2017

+1 for Ekahau.

MilesMeraki · ‎Dec 28 2017

I assume you're trying to get this information from the API? To my knowledge, you can't get this information for a set period of time from an API call currently. This information can be gathered from the dashboard by going network-wide>clients and assigning tags to certain clients you want to monitor. After assigning a tag, navigate to organization>summary report. You can then specify to run the summary report on a custom time range, only on certain tagged clients.

MilesMeraki · ‎Dec 28 2017

Check out this article for OSX Split tunnel configuration - https://documentation.meraki.com/MX-Z/Client_VPN/Configuring_Split-tunnel_Client_VPN

MilesMeraki · ‎Dec 27 2017

Isn't this the whole point of 802.1x? I.e If a client doesn't authenticate it doesn't get an IP/Connection? Therefore devices which can't authenticate via a wired connection regardless if it's a printer/laptop/pc won't get internet connection Have a read of this knowledge base article, it also gives you examples of how to configure - https://documentation.meraki.com/MX-Z/Access_Control_and_Splash_Page/MX_Access_Policies_(802.1X)

MilesMeraki · ‎Dec 27 2017

Really keen to understand why they require 4 ISP's? Why not look at consolidating this down two 2 ISP's and a cellular/LTE provider? I.E WAN 1 - Static IP ISP WAN 2 - Dynamic IP ISP USB - Cellular/LTE ISP If you want to get really funky, why not look at adding an HA MX arrangement and using dual services from each ISP on the secondary HA MX.

MilesMeraki · ‎Dec 27 2017

All Meraki MX's only support a maximum of 2 "WAN" ports. It would be great to find your use case/need as per @PhilipDAth's comment above to see if we can assist you in achieving your architecture.

MilesMeraki · ‎Dec 26 2017

Where are VLANS 101 and 102 currently configured? in your example I You’ll only need to configure those access layer VLANS (anything connected to the MS250 ports) on the MS250 switches. You’ll want to create a seperate switch network for your MS425 switches and create the VLANS on these switches where you have devices connected to these switches. I.e Storage, DMZ. youll then want to run OSPF between the MS425’s and MS250’s. so to answer your question, surely the layer 3 gateway/domain will terminate on the MS250’s which will natively perform inter-vlan routing as long as no ACLs are configured.

About MilesMeraki

MilesMeraki

Eliot Foye

Community Record

Badges