Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About scrapiron
scrapiron
Getting noticed
Member since Sep 13, 2017
May 17 2021
Community Record
21
Posts
1
Kudos
0
Solutions
Badges
May 17 2021
11:11 AM
A client needs a cellular connection as their primary as the ADSL is unusable. They use other network equipment including their firewall. Can I deploy a single MG to a new Org without any MX behind it? Anything features or functionality lost if you don't have a MX? Thanks
... View more
Ekahau is fantastic. Not cheap but easily pays for itself in one or two big projects.
... View more
May 7 2019
8:03 AM
This makes sense. I will move the MX to the electrical closet and route the tenant's WAN traffic through a private VLAN. Thank you so much!
... View more
May 7 2019
6:51 AM
I have a client that owns a building with many tenants. The client also has a office in the building and uses Comcast with 1 Static IP address. A new Tennant ordered Comcast service but I have a problem. Comcast installed both Cable Modems in their Demarc (electrical Closet) My client (building owner) and tenant have their firewalls installed in their suites. Unfortunately, there is only 1 Ethernet cable connecting the electrical closet and a Janitor closet which is about 200'. My client uses this cable to connect from Janitor closet to their suite which is only about 40'. The new Tennant is located next to my clients suite. They have had contractors try to get a new ethernet cable from Electrical Closet to their suite but it is extremely difficult due to thick concrete, overfilled conduit, yada yada. New Tenants also want to use Comcast but Comcast will only install their modems in electrical closet because they couldn't get coax to other side of building either. So I'm proposing to use MS-120 switches in Electrical Closet and Janitor closet to create VLANs for each new tenant using the existing ethernet. Easy I thought. After spending about 4 hours running back and forth with switches and MXs going offline, VLAN mismatches, Public IPs on switches all the while I'm trying to stick finger in dike holes with cloud managed devices getting angry and I'm pulling my hair out and bailed realizing I need a plan before I go back and implement. I created a Diagram in Google Docs Here and kindly ask if anyone could review and let me know if this looks like a good design. Honestly, I think I could have pulled a ethernet cable with the amount of time I have spent but hey, this is fun right? Link to diagram VLAN 10 - VLAN for my clients firewall configured on switches only VLAN 20 - VLAN for Tennant's router configured on switches only VLANs 100-102 - Native VLAN 100 is for my clients LAN configured on switches and MX67 thanks
... View more
Dec 5 2018
1:28 PM
I opened a case with Meraki and they provided a detailed response with some suggestions about using ACLs on the switch to try to block but in the end said there wasn't much I could do as it would have profound effects on wireless clients. Open-Mesh suggested turning off Mesh since I am not using it (which I had done) and they also were kind enough to disable the bluetooth presence reporting on the back end which really hasn't made much difference. I eliminated the second SSID which cut it in half. But the best thing to do is restrict the view to restrict the network clients to just "Security appliance clients only" which removes them and returns the view refresh back to normal snappiness. It was then I realized these Arps are not making it to the MX; just the switches. Woo Hoo!!
... View more
Dec 2 2018
6:50 AM
There are 45 APs total and all are wired into ms-120 switches. I have disabled the mesh feature on cloud-trax as we don't use it but the gratuitous arps keep coming. Creating VLANS is no problem but the MX will still list the arps as separate clients in the dashboard. I don't think the traffic they produce is a problem and wouldn't really consider it to be a storm although I could be wrong. It just fills up the arp table and skews the reporting. It also makes viewing the dashboard clients incredibly slow as it builds the list of 50K clients to display. It's not too late to send the 120s back and upgrade if you think it would help. I'm just really trying to stop the arps at the switch port from making it to the MX. Open-Mesh said it was a problem with Meraki as they should be able to ignore gratuitous arps.
... View more
Dec 1 2018
2:52 PM
Client is small hotel with 40 rooms. Since the building is a 5 story solid concrete (literally all walls and floors are 6" thick) building, they have a Open-Mesh AP in each room. They were having problems and hired me help improve things so I tossed the crappy unmanaged switches and installed 4 MS-120 24P switches and MX65. Within an hour, the dashboard showed over 10k mac addresses on the network mostly due to the APs sending constant gratuitous arps which enable the APs to "mesh". I have disabled the mesh feature in cloud-trax (their cloud manger) but they still continue to do it and Open-Mesh said it can't be shut off and to control it from the switches. Anybody know how I could prevent these from hitting the MX? I was thinking about creating a MAC whitelist for each port containing the address of the AP it powers. The APs are doing NAT for wireless/wired guests but bridging to operations VLAN for staff, IoT devices and corp traffic on the second SSID. I've already pitched replacing them with 45 MR-30H's which didn't go over very well. 🙂 thanks.
... View more
Sep 17 2018
9:56 AM
I've deployed both Meraki and Cradlepoint. Cradlepoint is going to hold up much better. The IBR1100 is shock, dust, vibration proof. Takes DC power (12-36v) has GPIO options to shutdown after x amount of time so battery doesn't drain out. I love Meraki, but if you want a Bullitt proof solution for mobile fleets, you go with Cradlepoint. Now, if I could just get the Cradlepoint to act as a VPN peer to our MX at the office.
... View more
Good point about grounding. Can you share any tips or best practices you implement. The Installation guide is weak in my opinion. I usually attached the Green grounding strap to the AP ground lug. I then run a ground from the same lug to ground using 14 gauge or better wire. Would using Shielded and properly grounded ethernet runs suffice or do you always have to ground the AP with a separate wire?
... View more
Deploying a bunch of MR66s in the rain today and seriously wondering if these pretty white Meraki boots at the base of these ma-ant-20s is going to cut it. Does anyone apply anything a bit more durable? These are going to be getting marine sun wind and rain for years to come. Thanks.
... View more
Sep 22 2017
1:03 PM
Just had this issue for the second time in the last week. 220-8P requiring reboot after firmware upgrade. It shows it hasn't checked in the dashboard but can ping devices connected to it across the network. weird.
... View more
Sep 21 2017
3:53 PM
Very nice. Thanks for your reply.
... View more
Sep 21 2017
8:08 AM
Cisco seems to be out in front pretty early on this developing problem with Intel's C2000 chips failing after 18 months. Should owners of affected MX devices open tickets for RMAs as soon as they become available? Due to the enormous number of possible devices impacted, supply of replacement chips is going to be seriously constrained. Probably better to act fast and get in line if Meraki is going to offer exchanges. Tick Tock Tick Tock Tick Tock.... First read about it here https://cantechit.com/2017/02/07/clockgate-2017-the-intel-atom-c2000/ Ciscos Statement. https://www.cisco.com/c/en/us/support/web/clock-signal.html#~field,
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 12416 |
© 2024 Cisco Systems, Inc.
