Meraki

MilesMeraki · ‎Jan 18 2018

How do you have the HA arrangement currently configured, the WAN ports on these two devices should be different? The only use case I could see where they would be identical if you were using a Public static IP for the devices and directly plugging into your ISPs network.

MilesMeraki · ‎Jan 17 2018

Currently, all MX models only support a Maximum of two active WAN ports with the cellular/USB interface used for last resort. Can any of the Meraki employees within the community advise if Meraki is going to look at the ability to have more than two active WAN ports on the MX's? This current limitation is definitely a stumbling block for some of the SD-WAN deals.

MilesMeraki · ‎Jan 17 2018

As above, I'd definitely look at upgrading from an MX65 if you're going to have 700 active clients on the network behind the MX. An MX100/250 would suit you better, especially if you're using all advanced security features. I'd recommend reaching out to your Meraki sales rep who will be able to assist you with rightsizing your MX for your environment.

MilesMeraki · ‎Jan 17 2018

Me and @PhilipDAth are based in NZ. Happy to act as a contractor for a day and manually change the timezone on the IOS devices 🙂

MilesMeraki · ‎Jan 17 2018

I don't think there is a way to abstract this information from a report from dashboard. You'll be able to create a script and obtain this information via the API however.

MilesMeraki · ‎Jan 17 2018

Thanks for the update @CarolineS 🙂

MilesMeraki · ‎Jan 16 2018

If you're still unsure if it's the tagging issue a simple packet capture taken from the MX on LAN 1 would be able to prove if that is the case.

MilesMeraki · ‎Jan 16 2018

@trinpm, When you talk about Downtime, are you referring to your Meraki devices have lost power or during brownout windows (I.e Loosing cloud/internet connectivity). If the Latter, The devices will continue to cache the traffic flows and event logs and will pass this to the Cloud/Dashboard when Internet/Cloud connectivity is restored.

MilesMeraki · ‎Jan 16 2018

Is that the only AP that is now giving your grief? If so I'd start by visiting the area of that AP and trying to locate what could be causing the interference issues by the human eye or a spectrum analyzer if you have one handy. If it's still across the board I hate to recommend it however it may be time to perform a site survey again to ensure optimal channel selection.

MilesMeraki · ‎Jan 16 2018

All Meraki MX appliances use and support L2TP for Client VPN connections. Have a read of the following article which will shed some more light on the supported platforms as well as configuration steps required - https://documentation.meraki.com/MX-Z/Client_VPN/Client_VPN_Overview

MilesMeraki · ‎Jan 11 2018

Have you taken a packet capture from the MX on the LAN/WAN Interfaces to ensure that the VPN traffic is passing through the MX and not being blocked? If so, this would identify an issue upstream. If you're not sure how to do this get in touch with Meraki support who will be able to assist with troubleshooting.

MilesMeraki · ‎Jan 11 2018

@Louein, With the above error message I'd open a support request and provide them with that information and screenshot of error message. They should be able to assist you from there (Looks like there may temporarily be a back-end problem.)

MilesMeraki · ‎Jan 10 2018

2018 Meraki Resolutions 🙂 - Alexa Integration with the Meraki API - Allow Alexa for voice control of the Meraki dashboard. Who needs a computer these days? - Meraki evangelize! Showcasing how networking infrastructure can be used to improve business insights and digital marketing by the power of Meraki networking! - Strong SD-WAN push. Cutting customers WAN costs, putting the power in their hands, not their Telco's. Showcase how easy SD-WAN allows the ability to modernize your WAN architecture for the cloud era. - Continue to help and promote the Meraki Community by sharing knowledge of Meraki. - Obtain more Meraki SWAG! - I'm starting to create my own little Meraki SWAG Museum!

MilesMeraki · ‎Jan 10 2018

Layer 7 Firewall rules on the MR and MX will not be capable of blocking these messages for this use case. As @DCooper has already stated, have a look into Systems Manager where you'll be able to apply profiles to IOS devices to stop these messages/notifications. - https://meraki.cisco.com/products/systems-manager Even better is Meraki allow you to create a Free Systems Manager network and try out the paid feature version for 30 days!

MilesMeraki · ‎Jan 10 2018

Hey Adam, so by your reply I assume the Layer 3 allow rule did not work? - If not, I'd get a support case open with support to see if they are aware of a way to get around this.

MilesMeraki · ‎Jan 9 2018

How are you identifying that these are coming from the MX and MR devices and not another AP? Are you sure this isn't just a Hidden WEP SSID by another device in your area?

MilesMeraki · ‎Jan 9 2018

In that example as per the article, it's comparing having Layer 7 Firewall rules configured on your Meraki AP's and a layer 3 Firewall on the MX. If you have Layer 7 and Layer 3 Firewall rules configured on an MX appliance, Layer 3 Firewall rules will take precedence.

MilesMeraki · ‎Jan 9 2018

Are you using Advanced Security on the MX? Just configure a whitelist rule for the URL for the website - https://documentation.meraki.com/MX-Z/Content_Filtering_and_Threat_Protection/URL_Blocking_and_Whitelisting_Patterns If not, you can configure a Layer 3 Firewall rule to allow HTTP/HTTPS traffic to the Web page on the MX which will have precedence over the Layer 7 Blocking rule. Refer to this article which outlines the Layer 3 and 7 Firewall processing order on MX and MR devices - https://documentation.meraki.com/MX-Z/Firewall_and_Traffic_Shaping/Layer_3_and_7_Firewall_Processing_Order

MilesMeraki · ‎Jan 9 2018

As per the above articles, if VLANs are configured on the MX and no firewalls are in place, Inter-VLAN communication will be available. All that i can see you requiring would be routes from your controller to the MX and from the MX to the controller.

MilesMeraki · ‎Jan 9 2018

@TM_1 Glad you got to the bottom of it!

MilesMeraki · ‎Jan 8 2018

It sounds very much like you have a Rogue DHCP server on that VLAN. I'd take a packet capture on one of the ports on that VLAN to see what's sending out DHCP offers, find the port that the client is connected to and disable this port. You can also attempt the above troubleshooting too.

MilesMeraki · ‎Jan 8 2018

Disabling the port which the machine connects to is sufficient enough. This obviously stopping any form of possible network connectivity.

MilesMeraki · ‎Jan 8 2018

As WPA3 has just been announced at CES2018 (https://www.geekzone.co.nz/CES2018/8967), really interested to find out if Meraki has in mind about introducing this within the MR range? Is the hardware on the MR devices capable of supporting this standard or will a new release of MR devices soon be hitting the market?

MilesMeraki · ‎Jan 8 2018

We have customers who use - https://purple.ai/. Great for social media splash page access and targeted marketing.

MilesMeraki · ‎Jan 7 2018

What's the purpose of the XP client? I'd isolate it via an Isolated VLAN and then block the client to the internet via a Meraki blocking policy, this would block outbound communication. The biggest question I still have though is why is it running XP and why can it not be upgraded?

About MilesMeraki

MilesMeraki

Eliot Foye

Community Record

Badges