- About pstewart
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Community Record
35
Posts
11
Kudos
0
Solutions
Badges
09-09-2019
05:57 PM
We dropped Meraki about a year ago because of some bugs that seemed like they were never going to get fixed and for me the major issue is lack of IPv6. How does Meraki expect us to be taken seriously with our customers when they are asking for IPv6 and we couldn’t give them a straight answer? I voted with my wallet and moved to FortiNet - not to start a debate on Cisco vs X but FortiNet supports IPv6 and has a much richer feature set at a lower price point....
... View more
01-15-2019
10:17 AM
1 Kudo
The only way Cisco and Meraki will take note of this is by "voting with your wallet" I'm sorry to say. I'm just in the process of ripping out a lab system that was purchased with the intent of purchasing a large amount of Meraki. Since then I've changed our plans for rollout from Meraki to another system (doesn't matter who as that's not the point). I had this exact conversation about 4 months ago with a very large Meraki customer and they are frustrated. They have talked to their sales rep along with a regional manager and were re-assured IPv6 is a priority. Much the same as my conversation, the question came up as to why this is even a question in 2018 ... much shock set in when myself and this other company realized that development might take a couple of years before Meraki releases anything. If that's not true then that would mean development is well underway and more could be shared but what I understand is another few months from now just to get a timeline and resources scheduled to *begin* looking at this. Well, to be blunt .. it's at least a FEW years too late. One could even argue it's 10 years too late as that's how long I've been deploying IPv6 into service provider and enterprise networks. The large customer I referenced is going to start converting 10,000 units at a time ... the sad thing that I know will happen is that nobody will notice until *after* that customer has migrated away as that's exactly what will happen for me.
... View more
10-29-2018
05:52 PM
1 Kudo
"A lot of the mess is trying to force IPv6 into a NATed IPv4 world of today. v6 is old (first draft was back in '98), but only just received standardization last year, and there are still issues that IPv6 only networks don't address or have agreed upon solutions for -- many of which probably apply heavily to Meraki networks, like multi-homing and source address selection." I'm a huge proponent of IPv6 and massively disappointed that Meraki isn't willing to adopt it a few years ago when I strongly feel they should have at a minimum. Unsure what the "mess" is about though .. I see it deployed at scale in various networks every day. By deployed, I mean in a dual stack specifically which allows for a transition path fairly easily when the day, in theory, comes to shutdown IPv4. I'm not a fan of anything other than dual-stack ... all the transition technologies come with a certain degree of pain. Also, with regards to standardization I'm not sure what you are referring to with regarding last year. It's been a ratified and adopted standard for many years now - I first started deploying IPv6 into enterprise and service provider networks back in 2008 ... 10 years ago. Just some two cents on your post ... Paul
... View more
10-22-2018
08:06 AM
yes that's correct .. but those may be "interesting options" for the original poster to consider is all I was saying ..
... View more
10-22-2018
03:47 AM
Generally they make a lot of the "genuine" SFP's anyways for Cisco so that makes sense 😉
... View more
10-22-2018
03:41 AM
1 Kudo
If you go into the port configuration on a switch there are options there that might interest you .. Monitor -> Switch Ports -> Port X -> STP Guard Paul
... View more
10-22-2018
03:37 AM
1 Kudo
I have a lot of Apple devices in my home lab - happy to compare settings if you are still having problems ...
... View more
10-21-2018
12:00 PM
1 Kudo
Thanks ... been doing a lot of reading and things are looking to come together - testing right now 😉
... View more
10-19-2018
03:17 PM
1 Kudo
Not to be "that guy" but you mention Ubiquiti equipment and "enterprise equipment" and their gear is far from what I would consider Enterprise. I have seen a lot of it deployed and there are lots of folks who like it but it's not the most robust kind of gear. The first thing that comes to mind is whether or not the M5's are reachable from the Internet on a public IP? If they are, please firewall them as Ubiquiti have historically had lots of security related issues with getting hacked. I don't recall if the M5 specifically has had issues like that but there was a "virus" floating around for a while that targeted their gear and would cause all kinds of weird stuff like you described to occur. A firmware upgrade would remove the "virus" as part of the upgrade. A bit of a long short but wanted to mention it Paul
... View more
10-19-2018
12:36 PM
Partially answering my own question from this post I just found: https://community.meraki.com/t5/Managed-Services/AutoVPN-in-an-MSP-environment/m-p/14939#M70 I need to read up on AutoVPN (or any site to site options in Meraki) to understand more. Basically the reason is so that we can actually monitor all the devices via SNMP directly (seems like better metrics are available) along with the fact we can ping to check it's actually online etc ... maybe there's a better way? Basically we need to alert and contact the customer within minutes possibly of an issue - the Meraki Dashboard won't give us this ability ... Thanks, Paul
... View more
10-19-2018
12:30 PM
Thanks ... we were considering doing it all in one organization with the networks broken out per customer site etc ... but doing separate organizations has some benefits as well... licensing etc. I haven't done much with AutoVPN other than tried it out and it worked - simple test 😉 I need to do some reading obviously but you're saying that AutoVPN between organizations isn't possible or at least it's painful? Thanks, Paul
... View more
10-19-2018
07:47 AM
Thanks .. yeah MX64 in my lab at moment ....
... View more
10-19-2018
03:33 AM
1 Kudo
In looking at documentation, reading through the communities, and now testing some gear I've found the best way to get SNMP information is directly from the devices. This is still ongoing testing for me but I think I can get enough information that's needed now .... My question though is with regards to direct SNMP monitoring - can you monitor via VPN tunnel? I'm working on MSP deployment and considering turning up a VPN site to site back to a centralized MX specifically for monitoring purposes - anyone done something along these lines? Any surprises? The one thing that comes to mind is overlapping IP addresses between the sites but I understand the VPN has some kind of translation options to address this challenge? A lot of these sites will also have other site to site requirements along with remote access VPN - for my purposes of turning up a "monitoring VPN" is there anything else that comes to mind to be watchful for? Thanks, Paul
... View more
10-19-2018
01:07 AM
2 Kudos
So about the MR26 firmware ... I just bought some MR42E access points. After going through support channels and asking questions I come to find out that they can only run on MR26 firmware but yet in the portal, in your literature and anywhere else there is no mention of this firmware version even existing (from a new customer perspective). Then I come to find out that I can't even read about it as it's brand new beta code etc .... this seems to be a recurring theme with Meraki I'm quickly learning. I also purchased Insights and to run it I have to run the latest Beta code on MX gateway to even use it. The lack of transparency here is staggering and gives the impression that Meraki is happy to get the revenue and not happy to share anything up front about it's code... I have to say, before looking to roll out Meraki across an entire country, that this has me quite concerned.
... View more
10-19-2018
01:00 AM
They had better not drop support for Mac ... I'll be more than upset if they do. I have seen the same problems though as this thread is mentioning .... unfortunate.
... View more
10-19-2018
12:54 AM
Have played around with it ... definitely very much in beta (as it states on the web interface). The one thing that I didn't like is that you have to run latest Beta code on MX to even enable the feature - there is no mention of that anywhere and Meraki doesn't consider that to be a major issue after talking to them... I disagree. The thing that I do really like though is, for example, with Netflix monitoring. It actually got it right as to where the Netflix traffic was coming from. I use this example because (like Youtube and others) the content is fed from many different sources and a lot of times it will be on-net caches with your ISP. In my scenarios it got the exact servers that are on-net and the upstream catalog servers on Amazon 100% correct. In digging into this a bit more, I was curious how it could possibly get this information correct but then realized it was really looking at the traffic type and matching by the reverse DNS of the connected servers ... pretty simple but effective 😉 Amazon, Office365 and others seem to be accurate so far.... the web interface though takes a long time to load up once you have 10-15 monitored applications.
... View more
10-03-2018
04:21 AM
Thanks ... no, this is Network Performance section where it graphs what it thinks the application is doing for traffic specifically. Just checked iTunes traffic now from overnight and it says at one point there was 16Gbps of sent traffic. Opening ticket with support to see ... I'm just trying to understand how accurate the data is in Insights because so far I'm not seeing much accuracy at all (understanding that it won't be exact or anything)
... View more
10-02-2018
09:16 PM
I am running across what is likely a bug with Insights but there is no option to open a ticket for Insights, only for specific devices ... any ideas how I contact support? Basically on applications when I look at the network throughput it's giving me numbers that are not even possible (ie. 758Mb/s of iTunes traffic on an MX64) Thanks, Paul
... View more
10-02-2018
05:21 PM
In our case we have quite a number of customers that host their own SSL-VPN (hence the web question) and we host DNS for them (which has been more reliable than other solutions for them). thanks again.
... View more
10-02-2018
05:16 PM
Ah I see what you mean ... I work on the ISP side of things primarily so think like an ISP 😉 How would that work for web though .... use the dynamic hostname as a CNAME for inbound web traffic? Thanks
... View more
10-02-2018
05:10 PM
1 Kudo
Well there is clearly benefits to doing eBGP to upstream provider. Load a loopback address on the Meraki MX with two upstream connections and you have an "always reachable" destination for inbound traffic that may be forwarded to things like mail servers etc.
... View more
10-02-2018
08:11 AM
Sure, SNMP traps can be beneficial for sure ... assuming they can be reliably delivered and something "smart" in place to filter through them depending on how they are setup. There is though clearly some missing abilities with Meraki in this regard and I just need to figure out (as you mention) whether or not it's a major deal for our specific needs. Thanks 😉
... View more
10-02-2018
07:42 AM
Thank you for the response .... this is unfortunate as I can see Meraki as a great MSP style solution but without the ability to properly alert (in my opinion) and combined with no IPv6 support this is a growing concern for me. Thanks again.
... View more
10-02-2018
07:33 AM
Thank you .. unfortunately I figured this might be the answer. I have been reading around over there and was hoping to avoid building something or "re-inventing" things.
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 2418 | |
| 1 | 5395 | |
| 1 | 6733 | |
| 1 | 875 | |
| 1 | 4873 |
