Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Become a member of the Cisco Meraki Community today
Get answers from our community of experts in record time.
Join now- About TOCNY
About TOCNY
TOCNY
Here to help
Member since Apr 30, 2025
2 weeks ago
Community Record
7
Posts
9
Kudos
1
Solution
Badges
3 weeks ago
I am attempting to use the new AI assistant built into the Meraki dashboard. I issue a simple request to list all the firmware versions on all our MR access points. I get an error message back stating. "I'm unable to retrieve the list of access points and their firmware versions because access to the Meraki Dashboard is currently restricted from your IP address." I then ask the AI assistant to provide me the Meraki dashboard IP address or block I need to whitelist in order to provide the AI assistant the access needed to look at our enviornment. It replied it could not provide me the IP addresses and I needed to contact support. Before I open a ticket I was wondering if anyone else experienced this issue and if so what was the resolution?
... View more
Labels:
- Labels:
-
Firmware upgrades
-
Other
Yeah that is always a good plan. I have a 9300-48U stack in my lab that I am going to try this out on. I sent in the request yesterday to Cisco that allows me to convert the Cisco DNA license over to Meraki's MS cloud license and then I was going to test the modified IOS XE version on this stack and compare features both good and bad before we decide. We are planning our 5 year refresh this year and I am going to engage Meraki on the refresh as they now have aggregate models comparible to the Nexus platform which is what we use for our backbone. 5 Years ago they didn't really have the aggregate uplink capabilities that Nexus did so we went with all Cisco. The new generation of engineers I work with seem to like a GUI as they probably have less console experience so I believe with Cisco and Meraki are closer to being one company now than every before we're going to be moving in that direction with them. As a matter of fact the new high end aggregate backbone switches Meraki offer's have the Cisco logo on them.
... View more
While working on a ticket today regarding some Catalyst switches in monitor mode I was reminded that if your switch shows a Cisco s/n and a Meraki s/n it means your device is capable of running Meraki's modified version of Cisco's IOS XE software. It requires you to convert your exiting Cisco DNA license to Meraki's MS Cloud license and then affords you full management over your Catalyst device. From what I understand it's a huge improvement as the newer version of the IOS XE is feature rich and the only downside I can see is us old time Cisco cmdline guys will have to live in a GUI only environment. Has anyone had experience migrating their DNA licenses and the IOS XE image and now fully manages their Catalyst devices in Meraki's console?
... View more
Labels:
- Labels:
-
Other
I found that if you recycle the loopback1000 interface as well as the TLS Gateway communications resume with no switch reboot 🙂 Crypto TLS-Tunnel Submode Commands: cc-mode Enable CC-Mode device-id Device Identifier exit Exit from crypto ssl policy sub mode local-interface Specify the WAN interfaces mode Server Mode no Negate or set default values of a command overlay Specify the Overlay Type pki Specify the pki trustpoint for auth platform-disable Disable Platform support protection Cipher-Suite psk Specify the Pre-Shared Key server Specify the Server Address shutdown Shutdown the TLS-Tunnel virtual-template virtual-template
... View more
You are correct as that was my solution for some devices in the past that didn't come back up naturally, it's a PITA but it does get the device talking again. After speaking with the Meraki engineer today he got me thinking that the 9300's actually report as having (2) serial numbers, the Cisco chassis s/n and a Meraki s/n. That is an indication that the switch supports the conversion from the Cisco DNA license to Meraki's cloud license and then you get pushed a modified IOS XE version that supports Cisco's Cloud DNA management. This then provides us with full read/write capabilities and the only setback is old school Cisco guys like me live in the cmd line world and once we flip the license and the IOS XE version we lose command line and everything is managed via the Meraki GUI. I'm wondering if it would stablize the connectivity issues moving forward. I believe I am going to take a few lab enviornment 9300's and flip the DNA license and the modded IOS version and try full management on these switches.
... View more
The Catalyst switches are running IOS XE 17.3.4, certainly not the latest but a very stable revision. All Catalsyts are in "monitor only" mode as they have not been flipped to the Meraki "cloud based IOS XE" yet. Logs show nothing so we are scheduling a reboot this evening.
... View more
I have a ticket open and unfortunately support doesn't have an answer at this time. I have approximately 60 Catalyst 9300 series switches, most in stacks onboarded to the Meraki cloud. Last night at the exact same time 9 locations had their switch/stack go offline and unreachable. A review of the affected switches shows they are all working and passing traffic locally and all devices have Internet access. We were able to reboot a switch at a site with no one working and the switch imemdiately came back online after the reboot. We opened the ticket with support to hopefully avoid having to reboot the remaining affected devices and support had limited suggestions as the devices in question are offline and the device I rebooted is back online however like with a Meraki MS switch once rebooted all logs are flushed and provide no additional help to support. To complicate matters more is the fact that I have other like model stacks and single switches all on the same management vlan and some additional stacks at the same physical locations appearing online, while a few others remain offline. I have seen in the past issues with cloud connectivity that show me devices scattered throughout the WAN reporting down, however internal testing showed otherwise. In all previous instances of this all switches that showed down for no reason, came back online at some point in the day for no reason, however not this last outage, which has the remaining switches that went down still reporting unreachable. Meraki support was going to try and engage some additonal support from the Cisco side and I agreed that I will reboot all remaining affected switches but 1 to get them back up and monitoring and leave one switch unreachable for additional troubleshooting with support. Anyoe else have any similar experience with some of their enterprise Catalyst switches going down when like devices at the same site remain up? Thanks, Mark
... View more
Labels:
- Labels:
-
Other
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 1190 | Apr 30 2025 12:43 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 5 | 1190 | |
| 2 | 764 | |
| 2 | 837 |
© 2025 Cisco Systems, Inc.
