Meraki

RaphaelL · ‎Feb 21 2022

Hi , You have to run RSTP / MSTP on your switches from other vendors. I'm not sure to understand your issue. Also : It has been said, with some evidence to back it up, that Meraki switches do not support true 802.1w per-VLAN Rapid STP 802.1W is RSTP which is a single instance and not per-vlan. You seem to be refering to RPVST which is a Cisco propriarity protocol https://documentation.meraki.com/MS/Port_and_VLAN_Configuration/Configuring_Spanning_Tree_on_Meraki_Switches_(MS) https://documentation.meraki.com/MS/Deployment_Guides/Advanced_MS_Setup_Guide ( section Spanning Tree (STP, RSTP))

RaphaelL · ‎Feb 18 2022

I'm running a MS220-24P on 14.32 , 2 of my ports are showing High CRC Very high proportion of CRC errors on port 4 Very high proportion of CRC errors on port 10 Both ports are configured as Trunks ( should be access tho ... ) and are autonegociated to 10/100 Full duplex. All my other Apple TV that are not showing CRC errors have negociated at 1000 Full. TLD seems buggy today , can't run the test on my port , but I'm pretty sure I have a cabling issue OR the issue is on the AppleTV

RaphaelL · ‎Feb 18 2022

Hi , it seems to me that the AP has recorded Radar activity on your channels ( 108,144 ) Are you using those channels ? Are the APs registered to the correct Country in the dashboard ? You can manually exclude those channels if these logs persists

RaphaelL · ‎Feb 18 2022

Hi , I'm pretty sure we do have this issue also. What MS version are you running ? Thanks ,

RaphaelL · ‎Feb 17 2022

When displaying the Route table on the MX there are no entries for 192.168.100.0/X ?

RaphaelL · ‎Feb 17 2022

Hi , We have a special case that we would like to allow a certain group of people to be able to do packet captures on all the Org. Currently the only way that I'm aware to give them access to that feature is by being a '' full admin '' of the Org. We don't want that. Am I the only one with that special need ? Is there a misterious way to achieve my goal ? Thanks ,

RaphaelL · ‎Feb 16 2022

Hi , I have not tested if the firewall page will update by itself , which I supose it does. If you are using Site-To-Site VPN rules , you may have to adjust them, if not you may have nothing else to do on the Meraki side : VPN traffic to both AutoVPN and Non-Meraki peers is only subject to the site-to-site firewall rules and is never subject to global Layer 3 firewall rules. https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior

RaphaelL · ‎Feb 15 2022

Hi , According to Meraki Support and their documentation ( https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Clients_Usage_Page_Overview ) : "A client will only appear in the list once it has passed Internet traffic. If a device, such as a LAN printer, does not pass any Internet traffic, then it will not appear in the list." To be honest with you , this is a weird way to manage Clients and doesn't make any sense at all.

RaphaelL · ‎Feb 14 2022

Hi , Unfortunately I don't think that is possible for the moment. Even with Group Policy I don't see how you could achieve this.

RaphaelL · ‎Feb 11 2022

Yes. The Cisco Meraki MX Security Appliance uses Dynamic DNS (DDNS) to update its DNS host record automatically each time its public IP address changes. https://documentation.meraki.com/MX/Other_Topics/Dynamic_DNS_(DDNS) It may take up to 10mins depending on the TTL

RaphaelL · ‎Feb 10 2022

Hi everyone , Just wanted to share a quick find that would have saved us couple days of troubleshooting ! Issue : Client are getting disconnected from the Wifi after a reauthentication on a WPA2-ENTERPRISE SSID. Since the MX and Z do not have a configurable re-auth timer ( which is 1 hour ) you can experiment this issue frequently. This issue is not based on the Wifi hardware used but based on the wireless adapter used. Intel has strongly recommended to update the wireless adapter drivers to 22.110.1.1. The change logs are here : https://downloadmirror.intel.com/715194/ReleaseNotes_WiFi_22.110.1.pdf

RaphaelL · ‎Feb 10 2022

There you go : https://downloadmirror.intel.com/715194/ReleaseNotes_WiFi_22.110.1.pdf

RaphaelL · ‎Feb 10 2022

I'm pretty sure that the timer is fixed. Same as the MX ! I will try to forward the documentation about the bug. Check if you have any other wireless NIC that are not AX200 or AX201 in the meantime

RaphaelL · ‎Feb 10 2022

Boom ! I knew it ! There is a known bug on the intel AX200 and AX201 card ! Intel is releasing( or has released ) a new driver that fixes that issue ! We have the exact same issues. Upon re-auth the clients get disconnected 🙂

RaphaelL · ‎Feb 10 2022

Out of curiosity , what is the NIC and model of the Windows computer ?

RaphaelL · ‎Feb 10 2022

Yes that is what I ended up discovering. But this still reinforce the main point : the documentation is way too vague and doesn't contain the right info or correct info. If you look at the documentation for : /networks/{networkId}/events/eventTypes it only shows 1 event versus 60++ that you just showed. It wouln't be that hard to include the complete list into the body of the example. For eventtypes we are luck to have this call that returns all the possible values, but for certain calls we don't have that luxury

RaphaelL · ‎Feb 10 2022

Off topic:I still wish we could disable/enable rules for testing purpose instead of deleting / re-creating them.

RaphaelL · ‎Feb 10 2022

Since Templates are not returned when using the call Get Orgs Network , I doubt that you could update them as a network.

RaphaelL · ‎Feb 9 2022

Even worse , you can't even read the value from the API. At the moment none of these 2 calls can't help you : PUT /organizations/{organizationId}/configTemplates/{configTemplateId} GET /organizations/{organizationId}/configTemplates Sorry.

RaphaelL · ‎Feb 9 2022

No , you would not have to do any modification to the DHCP relays. The DHCP process* is a broadcast ( D-O-R-A ). As long as your broadcasts from your VM are reaching vlan10 , you should be fine. Without knowing anything more in your setup , you VM would only need to be bridged on vlan10.

RaphaelL · ‎Feb 9 2022

Just to make sure , you are talking about this in the UI : Select the template , Network-Wide -> General , Network Notes ?

RaphaelL · ‎Feb 9 2022

Unfortunately, no. It is indeed frustrating because you have to test individual calls to know the expected values that are returned. Eg : Event Logs ( /networks/{networkId}/events ) . Parameter : includedEventTypesArray A list of event types. A yes a list. A list of what values? You now have to filter thousands lines of logs to find it.

RaphaelL · ‎Feb 9 2022

However, when I add the organizationId( or the organizationId/networks) I get a 404 error. I tested the method with the other networks and only one network returned with 200. I'm not sure I'm following you. The call https://api.meraki.com/api/v1/organizations/{organizationId}/networks It needs a OrgID not a NetworkID. You should be able to list all the networks from that given Org. If it still fails for the same Org , I would open a ticket.

RaphaelL · ‎Feb 9 2022

Has the Org API settings been enabled ? :

RaphaelL · ‎Feb 9 2022

Then the queries would be simply : https://api.meraki.com/api/v1/organizations/ ( with a valid API key ) https://api.meraki.com/api/v1/organizations/{organizationId}/networks ( with a valid Org ID obtained from the previous call ) Simply log into any Org that you have a API key in your browser and paste the urls in the url bar : This is how I test my calls before scripting.

About RaphaelL

RaphaelL

Raphael Letourneau

Community Record

Badges