Meraki

MRCUR · ‎Jan 5 2018

@PhilipDAth I'm confused about your concerns with DEP. We use it with Mac's and iOS devices without ever having them touch Apple Configurator. DEP is a bit of a pain to get the initial enrollment set up with Apple, but then it's very easy to use and implement through Meraki SM.

MRCUR · ‎Jan 4 2018

@Chris_M wrote: The main thing is IPv6 is supported on the CIsco platform, its adapting it for the Meraki Dashboard that takes an effort and they haven't informed us of their time/effort on this. Just to be clear - the MX devices don't run IOS.

MRCUR · ‎Jan 3 2018

@BHC_RESORTS wrote: @AdamS wrote: Very nice shot, but may I suggest the framing would be better with some MS425's under that ;-). Looks like an HP 5406zl. One of my favorite switch chassis! Now if there was a Meraki switch chassis....wow would that be legit! 5406R without a second management module. I too really like this model and second the request for a Meraki chassis switch. I do have some MS425's as well since @AdamS mentioned it...

MRCUR · ‎Jan 2 2018

@Mr_IT_Guy @BHC_RESORTS I see your dual MX600’s and raise dual MX450’s.

MRCUR · ‎Jan 2 2018

Crafty is right @MerakiDave! Sometimes they're so crafty they end up on non-native VLAN's just to mess with you.

MRCUR · ‎Jan 1 2018

No, you cannot use HA and OSPF at the same time on the MS line. See here: https://documentation.meraki.com/MS/Layer_3_Switching/MS_Warm_Spare_(VRRP)_Overview

MRCUR · ‎Dec 28 2017

You'll need to configure a split tunnel VPN on the client side with the correct destination networks configured (what you want to send over the VPN). See here for how to do this in Windows with PowerShell: https://www.reddit.com/r/meraki/comments/5q32i2/meraki_client_vpn_windows_10_powershell/ Note the "$Destination" variable where you'll define what needs to be routed over the VPN tunnel.

MRCUR · ‎Dec 27 2017

Only two ports are supported as WAN interfaces. I don't believe any of the MX models support more than two WAN interfaces.

MRCUR · ‎Dec 26 2017

@PhilipDAth wrote: And there is no need to run OSPF on the MS250, unless you also want to make that a part of your layer 3 design (which is probably not needed). Agreed on the OSPF. There is not really a need to run it here, although the original network diagram included it. It is very simple to run OSPF between Meraki devices, but it's not needed and the MS425's can certainly handle the routing.

MRCUR · ‎Dec 26 2017

Do you have VLAN's 101 & 102 allowed on your uplink from the 250's to the 425's? All of the inter-VLAN routing should be happing on the 425's right now.

MRCUR · ‎Dec 18 2017

The MX line does not support IPv6 currently.

MRCUR · ‎Dec 14 2017

@BHC_RESORTS Color coded patch cables is the only way to keep things straight without always having to refer to documentation IMO. Also hugely helpful when you have a tech that isn't familiar with networking in a closet and need them to find the right thing for you.

MRCUR · ‎Dec 14 2017

I'll also add that I did an MS webinar over a week ago. Never heard from the assigned rep (not you, @MerakiDave!) and he hasn't responded to emails about the free switch.

MRCUR · ‎Dec 12 2017

@jared_f wrote: VPP is mandatory to have silent app installs. If you are setting VPP up I recomend you do user based licenses because they are easier to track and manage (in my opinion). Jared I find the exact opposite. Device based licensing makes everything so much easier. Deploying devices without having to bother with getting an Apple ID onto them is great.

MRCUR · ‎Dec 11 2017

Yes, you can do this with device based app licensing. This will allow you to silently install the app. You should "purchase" licenses for the SM app in the VPP store and then deploy it to devices making sure to select the device assigned licenses.

MRCUR · ‎Dec 11 2017

@Paulofg wrote: To get a whole subnet to use a different outbound IP you will only be able to do that if the IP belongs to the WAN interface and as someone mentioned above you could achieve that with another L3 device connected to WAN2. You don't have to connect it to WAN2 in the setup I suggested to be clear.

MRCUR · ‎Dec 10 2017

Do you have a /30 from the ISP AND another block of IP's that the ISP is routing to the /30 (Comcast does this for example)? In that case, what I've done in the past is terminate the /30 on a L3 switch that sits in front of the MX. Then on the switch, create a VLAN with the public IP block and connect the MX WAN port to this VLAN.

MRCUR · ‎Dec 8 2017

I'm pretty sure the MX can only NAT from the outside (WAN) interface to an inside (LAN) interface, so I wouldn't expect the setup you're trying to do to work with an MX. It's not totally clear to me why you have this setup, so perhaps there's a workaround that's not clear to me.

MRCUR · ‎Dec 5 2017

@BHC_RESORTS Agreed. I've been asking about it for a while now. Perhaps they're having a hard time making it Meraki simple to run dual-stack.

MRCUR · ‎Dec 5 2017

@PhilipDAth Had to do this today after the introduction thread seemed to blow up! I guess the community has been discovered by the masses now.

MRCUR · ‎Nov 5 2017

@MerakiDave Are you Dave S. who works with Matt S.?

MRCUR · ‎Nov 1 2017

Do you have a custom password set at Network Wide - General - Device configuration?

MRCUR · ‎Oct 28 2017

The recommendation is typically to create a network per location. To keep the configs all in line, you can create an MR template and then bind the template to each of the individual networks. The only networks I use that are not specifically tied to individual locations are Systems Manager network (typically one per org) and MX networks that serve entire orgs (aggregated Internet for entire school district for example).

MRCUR · ‎Oct 26 2017

Open a support case. That's why it's flashing - it's trying to update the firmware. The Dashboard firmware status changes immediately after an update - it's not accurate to what the device is actually doing.

MRCUR · ‎Oct 26 2017

If you go to the local status page, does it say there is an upgrade in progress?

About MRCUR

MRCUR

Community Record

Badges