Meraki

RaphaelL · ‎May 4 2023

Lots of people claming that S2S performance dropped with that version : https://community.meraki.com/t5/Security-SD-WAN/New-MX-18-107-stable-release-candidate-firmware-many-fixes-but/m-p/193443#M45132 I personnally haven't noticed yet. ( running MX68 and MX450 )

RaphaelL · ‎May 4 2023

Hi , Have you recently upgraded your MX/Z ? Let's say to version MX18.107 ?

RaphaelL · ‎May 4 2023

It seems that 'flows' was replaced by 'firewall' You still have ip flows start and ip flows end , but the syslog that contains the firewall rule name is now 'firewall' I can't confirm in which MX version it changed

RaphaelL · ‎May 4 2023

Hi , We upgraded some network from MX15 to MX18 and we noticed a new syslog event generated by MXs : Firewall May 4, 2023, 11:24:59 a.m.,"Cisco Meraki @ XXXXXXXXXX","<134>1 1683213899.478856202 XXXXXXXXX firewall src=XXXXXXXX dst=XXXXXX protocol=udp sport=47811 dport=1163 pattern: 1 all" Haven't seen this mention in either the firmware changelogs nor the documentation : https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration The MX Security Appliance supports sending four categories of messages/roles: Event Log, IDS Alerts, URLs, and Flows. Cheers !

RaphaelL · ‎May 4 2023

had already checked. Some Cisco products are vulnerable but the CVEs are not even listed there.

RaphaelL · ‎May 3 2023

Upgraded from what version ? What kind of devices ?

RaphaelL · ‎May 3 2023

Hi , Do we know if MXs are affected by these 3 CVEs ? I wasn't able to confirm with the Open source licences. Might have to open a case to have confirmation , but was wondering if anybody already had done that. https://www.forescout.com/blog/three-new-bgp-message-parsing-vulnerabilities-disclosed-in-frrouting-software/ Thanks ,

RaphaelL · ‎May 3 2023

Both the Prod SSID and the Guest SSID are getting disconnected ?

RaphaelL · ‎May 3 2023

Yes you can ! The licence type has to match to the destination Org ( eg : MX Enterprise to MX Enterprise , or MX Advanced Sec to MX Advanced Sec ) You can also open a ticket to support and ask them to move the licences.

RaphaelL · ‎May 3 2023

Was the firmware recently upgraded ? What kind of SSID are you using ?

RaphaelL · ‎May 2 2023

Or the highest vlan ID on a MX ( since MX do not have a mgmt interface )

RaphaelL · ‎May 2 2023

I don't think I have ever noticed that all my Win11 PCs are labeled as Win10 or as 'Other'

RaphaelL · ‎May 1 2023

I'm pretty sure that this thread is about 2 different issues. Yours is different than the OP , but is identical to mine. Intel AX cards are 'randomly' suffering packet loss upon roaming / reassoc. Goes to a full 802.1X auth. Disabling 802.11r fixes the issue. Downgrading fixes the issue. Upgrading the AX drivers to the latest 22.200.2 didn't fix anything. Are we having the same issues ?

RaphaelL · ‎May 1 2023

What version were you using ? 22.XX and now the latest 22.200.2 ?

RaphaelL · ‎May 1 2023

Hi everyone. MR29.6 is out and seems to be fixing a lot of issues with Client balancing and other symptoms shown here : General stability and performance improvements Ethernet PHY optimizations (MR30H) AP may stop sending MQTT updates AP may send client balancing updates when disabled AP may stop beaconing 5GHz BSSID after multiple DFS events (Wi-Fi 6 and Wi-Fi 6E APs) AP may continue to send traffic to a client after it has roamed to a new AP AP may reply to every LLDP packet from a PSE AP may not broadcast setup SSIDs on factory firmware (Wi-Fi 6 and Wi-Fi 6E APs) AP may reboot when the “Client Balancing” feature is enabled (Wi-Fi 6 and Wi-Fi 6E APs) Numerous fixes to address MT connectivity at scale (Wi-Fi 6 and Wi-Fi 6E) Might be worth trying !

RaphaelL · ‎Apr 28 2023

Hey ! Another Canadian Meraki enthusiast 😀 It’s owned by two of the biggest telco carriers in Canada So that's probably Bell Canada ✍️

RaphaelL · ‎Apr 26 2023

I'm pretty sure that this setting is not available via the API.

RaphaelL · ‎Apr 26 2023

Well after I upgraded my home link to 1G/1G , I'm hitting even higher upload with this firmware :

RaphaelL · ‎Apr 26 2023

I guess that : Fixed several rare cases that could result in a device reboot. Wasn't that rare haha !

RaphaelL · ‎Apr 26 2023

Hi , Haven't seen that issue in the wild yet but MX 17.10.4 has a fix for : Fixed several rare cases that could result in a device reboot. And MX 17.10.5 : Corrected a rare issue that could result in MX84 appliances becoming unresponsive after a firmware upgrade. So MX17.10.5 might help , but I would involve Support to look at the reboot reason ( crash ? reboot ? )

RaphaelL · ‎Apr 25 2023

Thanks @AlbertT . Can you link me your reference ? I want to read more about it.

RaphaelL · ‎Apr 24 2023

I have this nightmare also. MX450 hubs trying to reach unknown destinations on AWS and/or IPs that are owned by Cisco. No one has a clue , and TAC can't tell me what it is since it's blocked. But... I'm running a way older version that what you have.

RaphaelL · ‎Apr 23 2023

I will check the results on my end. On a side note , you have included a firmware ( MX ) that has no influence on your issues. What MR firmware are you running ?

RaphaelL · ‎Apr 22 2023

Then AirMarshal should have labeled it Channel 42. Bit strange

RaphaelL · ‎Apr 22 2023

Channel 44 should be 20mhz , no ?

About RaphaelL

RaphaelL

Raphael Letourneau

Community Record

Badges