@kYutobi I hear this. I spent uh, hours, double-checking that I had the right serial number, the right PAK, the right account when registering my first PAK because what if I messed up.   Meraki: click click paste click approve done. Account manager wants to know when their client's gear expires? Please use the read-only account to take a look, thx.   Still probably gonna write a script for pulling license and inventory info at some point, but. ... View more

Within the networking team? Wireless LAN or wireless (LAN implied).    To people outside the team? The wireless network or "you know, the wifi?" since they neither know nor care about what a "LAN" is. I pretty much never write Wifi, WiFi, or Wi-Fi as clearly it's too much effort.    I will admit to occasionally shocking people indecently by explaining how the wifi eventually turns into a physical network. "The invisible wifi is actually physical networking equipment" and "servers on the Internet are houses, not the roads" are my two favorite ways to surprise people who aren't exposed to networking. ... View more

I've seen it clear within a couple of hours on its own, but I was using a two hour time window. Double check your time window. It can be up to a month.   LLDP and CDP info is sent to the dashboard every ten minutes.   N.B. I do primarily interact with CDP via the API, because I'm often needing it for all devices in a network including the MX. You have to explicitly declare a range in seconds of less than one month there.   You can do a quick test of what the API endpoint sees in Postman. You'll need to: 1. "List organizations that the user has privileges on", 2. Make an "organizationId" variable and populate it with the org id. 3. "List the networks in an organization. 4. Make a "networkId" variable and populate it. 5. Make a "serial" variable and put your device's serial number into it. 6. Then use Device/"List LLDP and CDP information for a device". ... View more

I feel like the real take-away message here is that many of us would be very happy to pay Meraki for swag. I mean, it is usually much cuter than the Cisco denim shirt I see a coworker running around in. ... View more

If you're using the MX as a DHCP server, I've run into problems with Sonos when the DHCP is using the upstream DNS. Or rather - the Sonos speaker magically began working after we statically assigned the DNS, rather than using the upstream DNS function. ... View more

1. iNetTools Pro (ping, trace route, DNS lookup, port scan, whois... super useful little bundle) 2. Ookla Speedtest 3. Google Authenticator, because of course 4. IT Glue for accessing things like, say, the wifi password when I'm on site. Otherwise website 5ever. 5. Chrome. I spend a lot of time researching stuff quickly on my phone while teaching my help desk how to do something. 6. Do the camera and flashlight count as an app? ... View more

Do you mean you're not able to figure out how set DHCP options? If so: https://documentation.meraki.com/MS/Layer_3_Switching/Setting_Custom_DHCP_Options   Or are you looking for help to translate that into Meraki's DHCP options? ... View more

No, sadly, we can't do that for third-party tunnels. You get one IP and if it changes welp, you get to manually change it.   I wish we could do primary/secondary a la ASAs. ... View more

1. Turn on API for all organizations, manually. 2. Generate API key. 3. Get list of orgs that your API key has access to. 4. Build list that correlates org names and org numbers. I like objects in Python for this. 5. Write each org name and each org's results of "Return license state for organization" to a file. 6. Celebrate! ... View more

Meraki equipment gets its time from the dashboard, and can't serve time to other devices on your network. ... View more

If I understand correctly, your MX will route between the client VPN subnet and whatever subnet(s) or routes the MX knows exist.    You can use the firewall on the MX to restrict what internal access: https://documentation.meraki.com/MX/Client_VPN/Restricting_Client_VPN_access_using_Layer_3_firewall_rules ... View more

Do you only have a single account as full admin on your organizations? Meraki best practice is to have more than one full administrator on an organization, for situations such as this. If you don't have a second person you want to add, you can always create a second email address for explicitly this purpose. ... View more

What if I'm layering? Because I can do a pair of socks (the diamond ones), a tshirt under, then a polo over... and a Meraki-brand USB charging hydra in my hand.   Or two tshirts under and a polo over, but at that point the tshirts start to feel awfully bunchy in awkward places.   Seriously if you can, get one of the charging hydras. I use mine every day. I'm using it right now. 🙂 ... View more

I've been working on an easy way to pull CDP info, esp since the API seems like the only way to get it out of an MX. My goal was to be able to pick an org, pull its network list, then granularly work network->device category->device (or whole hog) to get specific info.    I'm doing this in Python. I convert the dictionaries into objects using classes, because I find it easier than trying to dig into some of the weirdly formatted JSON.   I don't have anything that's not weirdly broken to share, unfortunately.   Final product is a  CSV or xlsx containing:   Org name (if multiple orgs), network name, device name, all switchports (in your use case), all results of CDP/LLDP   Pseudocode:     Pull org list   for org in orgList:     get networkList from org           for network in networkList:             get deviceList from network                   for device in DeviceList:                     if the first two letters in the device.name == MS:                         get switchports                         get CDP/LLDP information for that device                         do some magic to ensure switchports are correlated to CDP/LLDP info                         output switchports and CDP/LLDP info into a CSV or Excel spreadsheet   If all of your APs are Meraki APs, you could instead check device.name == MR, then get CDP/LLDP info off the AP itself. ... View more

I prefer to keep DHCP on an AD server when I can, for production vlans. An MX won't let you cancel an existing lease one by one, and that's something I have to do semi-regularly for my clients.    If I've got a separately configured vlan for a guest network, then DHCP goes on the MX and I make sure the firewall rules block access between my production vlan(s) and my guest vlan.  ... View more

Huh, I'm going to have to play with that on my home lab. (Thanks, CMNA stack!)   Thanks for the tip off. ... View more

Is that an available endpoint in the dashboard API for SM? I didn't see it, but I miss things...   If it is, then you could:   1. GET list of all organizations you have admin for 2. Filter the result to only the schools you want to touch 3. Find the SM network for each school. 4. Iterate through the SM networks and push the OS update.   For the most part, if you want to manage a bunch of discrete networks all at once, you're going to be using the dashboard API. ... View more

Anything Laura Mvula, but especially when she did Sing To The Moon with Snarky Puppy.   Andrew Bird, Kishi Bashi, most any kind of motet just so a ton of choirs can get work... ... View more

Ah. Well, there's your answer then. If I remember a support call correctly, then non-MX Meraki devices don't have the ability to track clients via IP. They can only track via mac.   Have you reviewed https://documentation.meraki.com/MX/Monitoring_and_Reporting/Client_Tracking_Options ? ... View more

I have networks with both L3 switches and MX devices in the same combined network. You should be able to have them all smushed together like that, so long as you've only got one MX (or MX HA pair) within the network. It's part of the full stack visibility goal. ... View more

Oh no! Have you thought about blocking peer-to-peer file sharing on your MX? 😉   tip your waitress, try the cobb salad ... View more