Meraki

Mloraditch

Hey look my old post about this! We created a dedicated API user and key for the clients we manage to work around this. It was causing all sorts of problems with our tools because most of our nightly/weekly routines run get orgs as the first step.

PhilipDAth

I'm currently running 17.18.2 on one 9300. No issues so far.

MerakiMaverick

Maybe a different thread needed and sorry to hijack; but what if your networks are associated with a Configuration Template? Could one still tag and upgrade firmware individually?

CloudStrife

Congratulations to everyone!

cabricharme

It may behoove you to work with your partner (either Cisco or VMWare) or a more senior coworker if available so they can go through this with you in your environment and show you what this all looks like live. Your goal of a management network that is isolated is generally a good one but I'd recommend consulting as I stated above or at least reading and labbing more with both the Meraki and VMWare documentation at a minimum. It would behoove me very much 🙂... This environment was designed by an MSP with senior VMware and Meraki specialists (before I joined the team), then was audited by said MSP - also with a senior Meraki specialist - and after that it became clear to me that figuring all this out is mostly on me. Thanks again for the help.

PhilipDAth

Boundles Digital sell a tool that should be able to do this. https://www.boundlessdigital.com/network-management/meraki-automation/move-devices-and-networks/

RWelch

Thank you - I'll give it a try.

MerakiNew

We contacted with Global Meraki Sales, Marketing team and we find out that our country didn't have access to that SKU (vMX advanced license) for some reasons. We could finally bought licenses and renewed our customer's Organization successfully. Thank you for all answers.

JGill

LAB testing confirms this issue is not fix for MX uplinks. Resolved a bug that caused some 48 port MS150 switches connected to MX gateways to experience reductions in uplink throughput if the uplink was connected to any port in the 41-48 range If your MX uplinks are in a MS150 MGig port move them to a standard ethernet port. You're customers will thank you! Also don't use MS18.1.4 if you have SFP's in the switch. They will start to flap. TAC case for that is back to development and they are talking mid January.

GIdenJoe

We also had some issues with distributors not really having mastered the whole Meraki-Sub and Cisco-Sub thing and we had customers that were at risk of being disabled. So in those cases I had to make a Meraki support case to extend the period before finally adding the new subscription type licenses.

EdwardM

Also experienced the below on Ms350-48FP "48 port MS150 switches connected to an MX gateway may experience a reduction in uplink throughput if the uplink is connected on ports 41 through 48. As a workaround, connecting to the MX using ports outside of the 41-48 range will pass traffic at expected speeds."

KarstenI

The AP has to query the RADIUS server after the first auth frame from the client. The 9800 also supports it, so it’s not really difficult.

cmr

That thread was mostly me and nowhere does it say the MR36 is EoL. Why did the customer think it was (not that it really matters, but I am somewhat confused!

PhilipDAth

I agree with @Mloraditch - it is up to the SAML provider if you are required to log in again or not.

Brash

As @Mloraditch said, the more specific policies override the more general ones

IvanJukic

Yes. It normal, expected behavior on any switch. Native VLAN mismatches will cause problems with DHCP and general communications. See below best practice guide. https://documentation.meraki.com/Platform_Management/Dashboard_Administration/Design_and_Configure/Configuration_Guides/Routing_and_Firewall/Fundamentals_of_802.1Q_VLAN_Tagging

Inderdeep

Good Job done for all the Top Shots !

IvanJukic

Hi @AJAY2 , @alemabrahao is right. Just test it. CDP can be (sometimes) problematic. LLDP is open standard, which is why Meraki use it. https://community.meraki.com/t5/Switching/Network-Topology-Incorrect/m-p/268482#M20262

PhilipDAth

These are the settings I am using for machine-based SCEP certificates. I don't believe the SCEP certificate deploys till you use it in something, like the SSID config.

RWelch

Perhaps so (kinda expensive) but it is an outdoor option.

Willrockhopper

I raised a support case with Cisco but was unable to recreate the fault so perhaps it's just general bugginess with the older software. Hoping for a stable IOS XE release soon.

RWelch

Too bad the documentation couldn't outright lay it out explicitly. I opened a support ticket a year+ ago just to make sure my single MX95 edge and MX95 VPN concentrator (both) were set correctly for client tracking. Glad to say support assists when it's needed but would be ideal if the examples laid it out clearly. Just my 2¢.

BlakeRichardson

I would suggest looking for alternatives to SM sooner than later which gives you plenty of time to migrate to something else. At least with Apple devices running OS 26 and later you can migrate between MDM without the need for erasing the device.

PhilipDAth

Can't you give the scanner the credentials for the local status page?

dachaves

Thanks Oren, This is good news.

About Mloraditch

Mloraditch

Matthew Loraditch

Community Record

Badges