Meraki

WadeAlsup · ‎Aug 15 2018

Hi @Josh3, Sounds like the way you're handling it would work. I kind of do the opposite thing. I assign a tag to each device (since they can have multiple). So my iPhones get an "iPhone" tag, iPads get an "iPad" tag, etc... Then I can manage apps/profiles based on Device as well as OS. All Devices with, without, etc... I don't think there's a real right or wrong way to do it as long as it works for you/your environment and you're ok with how it's managed.

WadeAlsup · ‎Aug 14 2018

I'm afraid my skills are going to be pretty limited as well. I would double check everything against the documentation and make sure you're hitting everything required on Meraki's side.

WadeAlsup · ‎Aug 14 2018

Hi @Amine, Have you read through the Documentation for it? "Note: If your browser enters an infinite redirect loop, check your walled garden settings and ensure the your web server's IP has been added to the walled garden." Might start there for the looping?

WadeAlsup · ‎Aug 14 2018

It's also interesting that your url bar shows https, but the error message shows that http is blocked.

WadeAlsup · ‎Aug 14 2018

Agree with @Adam here. Or try disconnecting a device, whitelisting it, and then reconnecting and testing. Meraki uses Webroot's BrightCloud for content filtering. You can check which categories a website falls under on their site: https://www.brightcloud.com/tools/url-ip-lookup.php

WadeAlsup · ‎Aug 14 2018

Your best friend is going to be Meraki Documentation, Meraki Support (cases can be opened from the dashboard Help section, as well as phone numbers listed for your area), and here on the community. You may be able to get some expert help from your purchasing partner, assuming they have experience and expertise with Meraki equipment. You might be able to find a video or two on YouTube to show some basics, but I wouldn't bet on finding anything super specific. Most networks are going to be tuned to business need.

WadeAlsup · ‎Aug 10 2018

I actually read about this the other day, but struck me funny since the use of Duo came up in discussion recently for MFA for RDP. Thought process behind the acquisition sounds like it could be promising. "The acquisition of Duo Security will: Extend intent-based networking into multicloud environments. Cisco currently provides on-premises network access control via its Identity Services Engine (ISE) product. Duo's software as a service-based (SaaS) model will be integrated with Cisco ISE to extend ISE to provide cloud-delivered application access control. Simplify policy for cloud security. By verifying user and device trust, Duo will add trusted identity awareness into Cisco's Secure Internet Gateway, Cloud Access Security Broker, Enterprise Mobility Management, and several other cloud-delivered products. Expands endpoint visibility coverage. Cisco's in-depth visibility of over 180 million managed devices will be augmented by Duo's broad visibility of mobile and unmanaged devices." Cisco news release

WadeAlsup · ‎Jul 25 2018

+1 for RDP Gateway and using Duo for 2FA

WadeAlsup · ‎Jul 19 2018

Hi @TimBisel, I would agree that this wouldn't be my ideal setup, albeit I'm sure it gets the job done... Do they need access to each individual camera externally? Or are they only accessing an NVR that all of the cameras are connected to? If it's the latter, you should only have to specify a single IP for the NVR. You would also want to identify what public port needs to be opened and narrow the exposure to that device. Probably could be found in the configuration of the NVR.

WadeAlsup · ‎May 7 2018

Medium Perfect for my trip to Hawaii in July

WadeAlsup · ‎May 3 2018

Mine came in as well. Pleasantly surprised. Thanks Meraki!

WadeAlsup · ‎Apr 30 2018

New Engineering work space, wired up and ready to go.

WadeAlsup · ‎Apr 24 2018

@BrandonS is correct. You want to make sure that you fully disconnect and let the dashboard recognize that before reconnecting your client to test. Also verify that you do not have any policies applied to the client. I'll create a test ssid here to see what I can come up with.

WadeAlsup · ‎Apr 24 2018

Truthfully I haven't tested blocking ICMP traffic as I haven't seen the need in my own environment. Think of it more as flexibility of configuration. Just because you use NAT mode with Meraki DHCP on your ssid and call it an "isolated guest network" does not mean that it has to be. You can offload DHCP for clients and still allow them to have access to network resources.

WadeAlsup · ‎Apr 24 2018

Ping uses ICMP rather than TCP or UDP protocols on a separate layer of the OSI model. See this thread for more about blocking ICMP on an MX device.

WadeAlsup · ‎Apr 24 2018

Oh, the good ole days without Meraki. Running around everywhere and staying in shape. Meraki's full stack has helped me become a little more "well-rounded," as my wife would say... Here's to my 60 lbs lighter self and still green in IT...

WadeAlsup · ‎Apr 19 2018

Hi @edbarrett, Once your clients connect to your network via VPN, they will show up in your dashboard under Network-wide > Clients. You can find them very easily by the status symbol (which looks like a globe for VPN clients) or by filtering for that subnet. Once you find the client, you'll see they have the Network Policy labeled "Normal" which will be your default policy. You can select that client and change the policy to another that you have setup. Different policies can be setup under Network-wide > Group policies.

WadeAlsup · ‎Apr 10 2018

Hi @ChrisDenny, I have to agree somewhat with @TimBreen on why the questions specifically around manufacturing facilities? That being said, I have deployed Meraki wireless in our offices and on our shop floors. So far, no major issues. It's actually been quite beneficial. We have a E-Coat line that uses it's own proprietary wireless network of a sort to send commands from the primary controller to the multiple moving arms that will drop racks into the dip tanks. Using the RF Spectrum helped me easily identify the interference that was causing us errors in the beginning. Saved me a lot of time.

WadeAlsup · ‎Apr 10 2018

Hi @DincTuna, You would want a PoE Injector between the modem or switch and the MR30H wan port if you do not have a PoE switch that will power it. See MR30H Installation Guide

WadeAlsup · ‎Apr 9 2018

@BHC_RESORTS, right now it's an MV21 in a somewhat temperature controlled environment with it's own fancy ventilation system. The camera is mounted about 10 feet above the catwalk, but on the inside for clarity (so that the camera isn't capturing through glass) and really out of reach for any potential splashing. So far we've had no issues, but I do have an MV71 that we can put up if the need arises. We have the optical zoom maxed out, so the frame makes it seem like it's much closer.

WadeAlsup · ‎Apr 6 2018

Ours would be the camera we have mounted on the inside of our Electrocoating process line. We are not a 24/7 manufacturing plant, so there isn't always someone on site. We have this camera on the inside of the e-coat drop tank area and have the settings to always be in night mode with IR illuminators on. This gives a fairly consistent contrast no matter the lighting outside and the IR seems to reflect well off of the ripples in the chemical solution in this tank. We use this to monitor the circulation of the chemicals in this tank (there is a HUGE investment in this tank full of chemicals). If we lose power, we have a backup generator that kicks in to power the pump that keeps this circulating, if it stops for longer than a set amount of time, the entire chemical batch is ruined. We also have a third solution that is a manual process of draining the tank to a secondary holding tank that then uses compressed air to circulate. The screenshot I have is with the plant lights on outside, it's much more detailed when it's dark. We dropped down the massive arm that moves through the semi automated process line to use as a platform so that we could get this mounted. The primary operator, backup operator, and production manager all have access to this camera feed. We have a relay setup through our burglar alarm that sends them text message alerts when we have a power failure and the backup generator is set to kick on. Since all of our network equipment are on their own dedicated battery backups, they have about a 60 minute window where they can log in and verify that the chemicals are fine.

WadeAlsup · ‎Mar 27 2018

Thanks @sshort, I have a GPO that pushes out the agent once domain joined locally and then installed the profiles. I'll try to uninstall/remove both and reverse the order as you have stated and see if that doesn't get me through the day. Then I'll reach out to support.

WadeAlsup · ‎Mar 27 2018

Hello everybody, I searched through to see if I could find a similar thread, but had no such luck. I'm setting up some new laptops for our Engineers. The few so far have both the Meraki Agent installed as well as connected to Meraki MDM (via Access work or school in Windows 10) for policies and future enhancements. From the Systems Manager > Add Devices > Windows it specifically states "There are two complementary device enrollment types for Windows desktop devices. Enrolling both an agent and a profile enables all available functionality. Enrolling one of the options may be better depending on the use case." I currently have a few other devices that have been added this same way, however, I'm seeing duplicate devices in the Systems Manager dashboard client listing now for these newly enrolled laptops. Has anyone else seen this? Or will it clear up if I give it time? Thanks!

WadeAlsup · ‎Mar 20 2018

Hoping to get this mess cleaned up one of these days...

WadeAlsup · ‎Mar 13 2018

Hi @Monkey, Have you had them power cycle their modems/routers? Might sound crazy, but I've seen it a handful of times where the traffic wasn't passing through their edge devices correctly until a reboot.

About WadeAlsup

WadeAlsup

Community Record

Badges