Meraki

KRobert · ‎Dec 16 2019

Thanks! changing it to network, allowed me to use the list successfully. The break was intended to stop the loop. I'd ultimately like to have the script do the following: Create network VLAN Print "VLAN Created for ID1" Create next network VLAN Print "VLAN Created for ID2" . . . Once the list is finished, print "VLAN Addition Complete." Any additional thoughts on this?

KRobert · ‎Dec 16 2019

Thanks @BrechtSchamp. the network ID was a fake one. I was using it as an example.

KRobert · ‎Dec 16 2019

I am trying to create a VLAN on 40+ networks using python with the Meraki SDK. I would like to turn the networkid variable into a list or dictionary and run the code for each parameter within the list. After the parameter in the list is completed, I'd like to have a message printed saying the vlan was added successfully to the network. I am having trouble though turning each parameter of the list into a variable. Has anyone tried to do this? Example: Variables networkid =['L_6464416461', 'L_1648946644'] createVLAN = meraki.addvlan(apikey, networkid, vlanid, name, subnet, mxip,surpressprint=False) With one parameter in the networkid, the script works, but when I add two +, it fails. I am new to python and all around scripting so i'm sure it is a simple setup, but it is proving difficult. Any help would be great! networkid = ['L_6464416461', 'L_1648946644'] for network in networkid: if networkid == 'L_1648946644': break My output is the following: HTTP Status Code: 404 - No returned data HTTP Status Code: 404 - No returned data Process finished with exit code 0

KRobert · ‎Dec 12 2019

I am trying to setup a python script to manipulate the following. Has anyone run into this and have you been able to modify these parameters via the API successfully? MR Networks Manipulate the Addressing and Traffic section of the Access Control Menu for an SSID. Change NAT mode to Bridge mode Enable VLAN Tagging and add a VLAN Enable Layer 2 LAN Isolation in the Firewall and T-Shaping menu. MX65W and MR networks Hide the SSID

KRobert · ‎Dec 10 2019

Real Time Syslog data and Hardware data points. The ability to see what is going through my appliances without the need for 3rd party software would be really helpful. Also hardware information like up-time and real-time CPU utilization.

KRobert · ‎Dec 10 2019

Glad to hear everything worked out!

KRobert · ‎Dec 9 2019

I had a similar issue and I needed a real-time syslog monitor to see the traffic (inbound and outbound) passing through our MX100 Firewalls. I found Syslog Watcher as an option. You can get a 30-day free trial and if needed, support can extend it...and extend it...and extend....I digress. We ended up purchasing it because it is a pretty powerful real time monitoring tool and it only cost $250 for a year or $450 for 3 years. It has helped tremendously with real-time traffic viewing from the firewall. If anyone questions whether or not data is getting to, through, or blocked by the firewall, this software can let you know and answer right away. Filtering is pretty simple, show you by-the-second traffic, and you can store logs to go back and query previous logs. It would be nice if the real-time feature like the Cisco ASAs have would be available on Meraki. This wish has been on my list for a while.

KRobert · ‎Dec 4 2019

I feel like these MOTM deserve the "AI-Reflexes" Badge. They answer things so fast,you''d think they are IMB Watsons working together behind the scenes. 😀 Great job to everyone.

KRobert · ‎Dec 4 2019

I always open to sharing the wealth of knowledge @joshuametcalfe ! @Nash I agree 100% The Help Desk really lays the foundation of how your network is perceived to the end user. I think if you have any interaction with end users in your field, you should do at the very least a small stint of help desk support to get that foundation.

KRobert · ‎Dec 2 2019

Now were looking at SIEMs! SIEMs are exciting and awesome. A whole different league when it comes to reporting. Good idea @CptnCrnch.

KRobert · ‎Nov 27 2019

Another option you could do is create a new network and clone the configurations from the existing network. Go to Organization -> Inventory. Select your new appliance. Select Add To... and the choose New Network and copy the configuration from your network you want to replace. Except for Site-to-Site VPN settings and some appliance Name settings, every other setting will be exactly the same. Make sure the Internet port isn't using the same IP address until you are ready to migrate. Plug it in and have it access the internet like @Nash said, then when you are ready perform the swap. I have done this when I we needed to upgrade our MX100 Firewall's with MX250s and wanted minimal down time. Keep in mind if you are doing this with appliances that use Public Static IPs, you may have you contact your ISP provide and have them clear the arp cache on that IP address.

KRobert · ‎Nov 27 2019

I had to discover a better real-time syslog monitor once we transitioned to Meraki MXs for our Firewalls. I found Syslog Watcher as an option. You can get a 30-day free trial and if needed, support can extend it...and extend it...and extend....I digress. We ended up purchasing it because it is a pretty powerful real time monitoring tool and it only cost $250 for a year or $450 for 3 years. It has helped tremendously with real-time traffic viewing from the firewall. If anyone questions whether or not data is getting to, through, or blocked by the firewall, this software can let you know and answer right away. Filtering is pretty simple and you can store logs to go back and query previous logs. We use Solarwinds Orion for an SNMP server, but for syslog it was missing a lot of the features that Syslog watcher made up in .

KRobert · ‎Nov 27 2019

It is a real honor to be a part of a community that is rich in knowledge and knowledgeable people. Thanks everyone for the kinds words!

KRobert · ‎Nov 8 2019

Happy Birthday Community!!!!

KRobert · ‎Nov 1 2019

We provide all of our home VPN users with a Z3 and have no issue with the licensing. The Z3s are awesome. If you have any road warriors, I highly recommend the Z3C.

KRobert · ‎Oct 29 2019

https://www.tapad.com/ Make sure you use incognito browsing. 😁

KRobert · ‎Oct 28 2019

Marketo or GoGoGuest

KRobert · ‎Oct 28 2019

@CarolineS although you will be taking on a new adventure in what some say is the toughest job anyone could have, the community wishes you the best. The great thing is that this is an open and free community so feel free to stop in an post updates every once in a while! Cheers and thanks @PhilipDAth for bringing this to the community's attention. @MeredithW, as always we know you'll look after the community as greatly as you have been. Thank you for that.

KRobert · ‎Oct 22 2019

Done and Done! Who else thinks Meraki swag is the best?

KRobert · ‎Oct 22 2019

Good point @jdsilva. I'd say the best option is to add an MX65 at the very least followed by a MX67 or MX68. If you need it to be a rack mounted option, you could even do an MX84, but I wouldn't go beyond that. Another rack mount alternative for MX64-68 are from the company RackMount.IT - https://www.rackmount.it/vendors/cisco.html

KRobert · ‎Oct 22 2019

You can definitely do what @kYutobi is suggesting. We like to keep our Guest network separate from our primary equipment so we use a separate MX65 for all Guest traffic.

KRobert · ‎Oct 17 2019

@BrechtSchamp is on-point here. If you have 2 WAN up-links, then you can enabled load balancing and traffic shaping will steer to whatever WAN you decide via Flow Preferences.

KRobert · ‎Oct 10 2019

Glad you got it to work!

KRobert · ‎Oct 9 2019

Hi @ShadowoftheDark, This link may help regarding connecting non-meraki VPNs with Meraki's Auto-VPN. https://www.willette.works/merging-meraki-vpns/ AutoVPN + non-Meraki VPN Integration Considerations Only subnets local to the MX can be advertised to the remote Non-Meraki VPN peer. The subnets specifically selected as Use VPN, yes on the Security appliance > Site-to-site VPN configuration page will be included as the local interesting traffic in the IPSec exchange. Non-Meraki VPN routes are not advertised to OSPF or BGP peers. Non-Meraki VPN remote subnets cannot overlap with existing local, static, or AutoVPN routes. Doing so generates a Dashboard validation error when trying to save the configuration. Non-Meraki VPN routes are not advertised to AutoVPN peers.

KRobert · ‎Oct 6 2019

How much weight do the new racks hold? As long as the switch (13lbs) doesn't cause the rack to go over on weight you should be fine. The great thing about Meraki switches are that the rack ears are built in and provide more stability. We have over 27 locations each with wall mounted racks and all appliances, including two rack mount UPSs are secured without worry or issues

About KRobert

KRobert

Robert Kremnitzer

Community Record

Badges