Meraki

BubbaFromGA · ‎Sep 20 2022

Are you talking about encrypted DNS? My phone was using TLS to talk to OpenDNS. Once I blocked that, it was using udp/53 to talk to my pi-hole and then my MX. I ended up just hard coding the DNS server on my phone for that SSID. It has definitely cut down on the ads. Wish I could figure out how to block them for youtube.

BubbaFromGA · ‎Sep 19 2022

I'm not sure if this is the right forum or not. I'm running a pi-hole to reduce ads at home. After I upgraded to the latest and greatest iphone code, I noticed that I'm seeing a lot more ads. Checked pi-hole, and it is working fine. Check my phone, and pi-hole is first in the list followed by the two well known OpenDNS IPs. When I run a packet capture, my iPhone automagically chooses to use OpenDNS versus the local DNS server. I even put the pi-hole at the top and bottom of my list of DNS servers. The iPhone is still preferring OpenDNS. I tried creating Layer 3 firewall rules to block just my phone's IP to OpenDNS, but that did not work. I ran packet capture and can see my phone hitting the two supposedly blocked IP addresses. The only way I have been able to block OpenDNS from my phone is to create a L7 rule that blocks access to dns.opendns.com, which isn't optimal since I'd like to still use DNS the next time my cat disconnects the pi-hole. I ended up just using my MX as my secondary DNS server in my DHCP list. I removed the Layer 7 rule mentioned above. This seems to work fine now. Yeah, this is an apple problem, but I'm sure they were paid to code this new "feature" by the ad companies. Anyone have ideas on a less ham fisted better approach?

BubbaFromGA · ‎Jan 31 2019

I opened a case with support, and it ended up being an undocumented feature (bug) in the Meraki code. Their engineering team resolved the issue. Remote desktop is still a beta feature.

BubbaFromGA · ‎Nov 26 2018

You know that little "make a wish" button at the bottom right when you're logged into Meraki? I'd press that and put in an enhancement request. It wouldn't hurt to open a case as well with the enhancement request. I would love to see Meraki support flexible NetFlow as well as the ability to have multiple NetFlow destinations, and different flow records. Full disclosure, I'm a Cisco employee, but don't work in the Meraki Business Unit. When I worked in the Stealthwatch BU, we were always looking for customer input to make our product better. It isn't possible to do everyone's enhancements, but with network visibility being a huge play at Cisco, this one might get attention. Meraki is pretty responsive, but this might be a big request.

BubbaFromGA · ‎Oct 5 2018

I was trying to limit network access by TOD/DOW using policy, but SSID availability was the answer. Thanks!

BubbaFromGA · ‎Aug 22 2018

Solarwinds is looking for specific required fields in the NetFlow record in order to add it to NTA. I don't know if Meraki has those fields or not. I am ingesting NetFlow from an MX64 into Stealthwatch Cloud and Stealthwatch Enterprise. Take a look at the link Phillip provided above. I presume that will list the required fields. It looks like the Meraki NetFlow fields are listed here: https://documentation.meraki.com/MX-Z/Monitoring_and_Reporting/NetFlow_Overview

BubbaFromGA · ‎Aug 19 2018

I've been using MDM on my windows 10 laptop for at least two years, and in the last week, the mouse functionality stopped working. I have tried uninstalling and reinstalling the Meraki PCC Agent with no luck. Any other thoughts?

Meraki

Community

About BubbaFromGA

BubbaFromGA

Community Record

Badges

Re: DNS server preference for iPhone tclients

DNS server preference for iPhone tclients

Re: Remote desktop mouse not working

Re: Meraki and netflow with Solarwinds

Re: Time of Day vs 24 hour restrictions

Re: Meraki and netflow with Solarwinds

Remote desktop mouse not working

Re: Remote desktop mouse not working

Re: Meraki and netflow with Solarwinds

Re: Meraki and netflow with Solarwinds