Meraki

Ryan2024

I've been reading through a few threads here and on reddit, but haven't been able to come to a conclusion on this yet. We have a network with MS firmware from 2023. This thread seems to indicate that firmware updates will only automatically get pushed out if the current firmware is end of support - and given the MS firmware is listed as Critical, I would've thought it would have met the criteria for being upgraded. https://community.meraki.com/t5/Security-SD-WAN/Can-t-Configure-Automatic-Firmware-Upgrade/m-p/133563 This thread claims that if you set an upgrade window, you'll be able to set everything to "upgrade as scheduled" and let Meraki handle things. We have an upgrade window set, but that option isn't available. https://community.meraki.com/t5/Dashboard-Administration/AUTOMATIC-Firmware-Upgrade/m-p/46384 If we have to manually schedule upgrades that's fine, but it seems like something that you should be able to automate? Thanks.

Ryan2024

Personally? I'm just trying to reduce the extra traffic caused by broadcasting a (seemingly) superfluous SSID.

Ryan2024

Maybe I could during a holiday when nobody is here, but no.

Ryan2024

Our network has two SSIDs that are exactly the same except for one setting. Wired Clients are part of the wifi network Network 1 - yes Network 2 - no These SSIDs both broadcast in offices. My understanding is that one of them is used for devices that are hardwired, and the other is used for devices that don't have ethernet ports. I just don't understand why. I'm not understanding the value in having both SSIDS, whereas there is clear value in reducing the # of SSIDs broadcasting (these APs have another 2 SSIDs broadcasting on them, for a total of 4). What am I missing?

Ryan2024 · ‎Jan 16 2025

Is there a way to view clients that were connected to an AP during a specific time frame? The event log shows you events before a certain time which kind of works, but it's unwieldy to wade through all the events in a long time frame - even with filtering.

Ryan2024 · ‎Jan 14 2025

I just double-checked, and we do have NAT mode enabled on our SSIDs. Do you know of any major drawbacks or pitfalls to transitioning off of this?

Ryan2024 · ‎Jan 14 2025

Thank you - I'll reach out to our SOC for clarification.

Ryan2024 · ‎Jan 14 2025

Hi all, I'm new to networking and recently started with a new company. I haven't been able to get an answer to this, so I thought I'd try here. My understanding is that because we use 802.1x and have to configure each AP's IP address on our firewall, when our SOC identifies malware on an endpoint, they can only see the AP's IP address. So if there's, say, 10-20 devices on the AP, there's no way to know exactly which device needs to be remediated. 1. Is this a common implementation? It seems...not great, from a security perspective. 2. Are there any alternatives with our current infrastructure, or would the solution be to move away from 802.1x to something like FortiNAC? 3. Did anything that I just said make any sense, or should I change careers (again)? I appreciate your time.

Meraki

Community

About Ryan2024

Ryan2024

Community Record

Badges

Automatic Firmware Upgrades

Re: "Wired clients are part of the wifi network" setting

Re: "Wired clients are part of the wifi network" setting

"Wired clients are part of the wifi network" setting

Viewing Clients Connected between XX:XX and YY:YY

Re: 802.1x and Malware Identification

Re: 802.1x and Malware Identification

802.1x and Malware Identification