Meraki

Paccers

To be expected really, it was more a post in case they are close enough to at least say 'oh it's coming soon to Early Access API' or similar

Mloraditch

It's not listed on the 9176 or 9172 datasheets, but the 9178 does list the supported bands and those are not included: https://documentation.meraki.com/MR/MR_Overview_and_Specifications/CW9178I_Datasheet My assumption would be if the highest model doesn't have them, the lower levels won't either, but your account rep may be able to have an SE confirm.

GreenMan

That sounds like MX warm spare to me - you're trying to provide continued connectivity, should the MX fail..? https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair#Routed_Warm_Spare

RWelch

@meraki-chris 👏 👏 👏 🎉

MartinLL

You need to use SAML if you dont have any radius service like ISE that can forward your authentication to an MFA server. Read here. https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/AnyConnect_Azure_AD_SAML_Configuration

jimmyt234

The unfortunate reality is that you need to manage your own firmware as letting Meraki automatically update, as you have experienced, doesn't happen half the time and you end up with networks in Critical status that have not been upgraded in years.

GIdenJoe

A session should always take precedence over templated config. There is talk that access manager will also be supporting some basic form of profiling which is basically what smartports do on the LLDP/MAC only side. Access manager will be a licensed feature (either having advanced licensing on your Meraki hardware or a separate license if you don't have advanced) So the place for smartports will be for people who do not want to pay for access manager. But once you have access manager it should completely supplant smartports since you can do all and more with access manager.

GSMITH

I only needed the location services on so that the time zone was correct. Each summer we reset all of the schools ipads for the new school year and if we don't go in and change the location services to on, then the time zone is wrong which in return causes issues for certain applications etc.

Mloraditch

I believe that bug exists in every release after 18.211.3. You will need to get support to downgrade to that for now. Unfortunately it's not listed in the release notes.

sinelnyyk

Hi @Network_ICT, That's an interesting issue, I haven't seen it myself to be honest, however, I have a few suggestions on how to approach the troubleshooting. 1. In the wireless packet captures, make sure that you're checking the correct BSSID in the beacon frames, just to double-check that you're seeing beacons from the correct AP. 2. Create a test SSID that will be broadcasted on 5 Ghz only. You can enable it on the AP when it is affected and see if your clients can connect to it. This will allow you to see if the issue is limited to specific SSIDs, or it's AP-wide. Also, if you don't see it from the clients, it may mean that the AP is not beaconing for this SSID, which is a problem. 3. In the wireless packet captures, try to identify on what step the connection is failing over the air. 4. Call Meraki Support when the issue is happening. They should be able to verify if the SSID is beaconing, and also collect some backend wireless connection logs to see the step where the issue is failing. If you have a way to reproduce the issue on-demand, this will also help with troubleshooting!

Ike101

Thank you, I will try to check.

Shinichi_K

Thank you for the additional information! I got it.

Mloraditch

This can work if you have a routed block from the ISP, however that doesn't appear to be the case. If you are not meraki users I would just remove the meraki and connect your sonicwall directly. Probably will have to put it somewhere secure so you can return once you the contract is up and you are able to renegotiate to DIA only. There may be other solutions but I would operate on this like when FiOs almost always ships a router that is unnecessary, remove it and do your thing the way you want. Might have to turn off some alert emails but I wouldn't think att will care.

RaphaelL

Like mentionned , I really don't think you can get this info at all. Since my MX are all connected to MS , I can check the MS uplink port status to see the negotiated link speed and duplex

sinelnyyk

Hi @AxL1971, @Networking101, There was a bug in MR 30.7 where client balancing was rejecting clients from connecting to particular SSIDs. This is resolved in MR 30.7.1+ firmware versions, and we didn't have reiterations of this bug. With this said, it is still recommended to keep Client Balancing disabled due to often client compatibility issues. If client doesn't support 802.11k, you can see something like "client was rejected by the AP" or "reason.code == 17" in the logs, which doesn't necessarily mean that that the AP is malfunctioning, but can just be compatibility issue. This behavior is explained quite well in this KB.

Rhyskil

I originally had the issue that this fixed back in December, but was told by support it was a fault with my connections (despite being two different carriers on two different networks happening at the same time). Was semi-relieved to see I was only being gaslit, in that there was a firmware patch addressing this exact issue. Upgraded, ran fine for two weeks, but having the uplinks briefly spike in latency / high loss for the last week again, 3 times just this morning. Issue's not fixed.

JaideepKukunuru

Please note that - we are working on couple of flexible licensing options for General Availability (GA) to meet the diverse needs of our customers. Advanced license is one of the options. We will provide more details soon.

henteko

ありがとうございます。サポートに連絡してみます。

MK2

Does anyone know what makes the MTBF times between the MS130 und MS150 so different? When comparing the MS130-48P vs MS150-48FP-4G, the MS150-48FP-4G has about 3 times higher MTBF rate. Are these values okay to present it to customer?

Simonmxt

100% agree. That is why this use case is very specific and limited to the MR76 model AP with a total maximum power consumption of 15 watts (802.3af).

PhilipDAth

Let me correct my statement about the documentation. I didn't spot some of the links originally. I will give the documentation a 50% score. But it is a good start for a brand-new product. It glosses over the whole certificate deployment process. Advanced users will probably be OK with this, but most Meraki customers will not. It needs to include a walk-through on how to deploy certificates with Intune PKI and Microsoft CA server or at least a link to Microsoft documentation on how to do this.

alemabrahao

https://docs.johnsoncontrols.com/bas/r/Facility-Explorer/en-US/Facility-Explorer-IP-Networks-for-BACnet/IP-Controllers-Configuration-Guide/Appendix-VPN-with-a-Cisco-Meraki-MX-security-appliance-configuration/Configuring-the-modem/router-into-bridge-mode

PhilipDAth

Mloraditch

As others have said checking the cabling as that's the likely culprit usually, if you have Meraki switches you can use this tool: https://documentation.meraki.com/MS/Monitoring_and_Reporting/Using_the_Cable_Test_Live_tool

Eagle5

I will have to put this on a back burner for right now. I was hoping it would be a quick, easy, just a couple of clicks to add a custom report or monitor or alert. Thank you again for the suggestion.

About Mloraditch

Mloraditch

Matthew Loraditch

Community Record

Badges