Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About TBisel
TBisel
Getting noticed
Member since Dec 3, 2018
Jun 30 2021
Community Record
42
Posts
11
Kudos
1
Solution
Badges
Nov 6 2020
1:08 PM
2 Kudos
I really am starting to hate this company. To add to the trouble, Apple has released the update. And its getting flagged by Meraki and AMP as malware.... So the alerts have just begun... Yippy! File downloads as 86ea5441393e1f0b96656bb5ad56364b308b7ca6.zip From: http://updates-http.cdn-apple.com/2020FallFCS/mobileassets/001-62165/F4052D84-DC41-414E-90A4-7E6E9715DD7C/com_apple_MobileAsset_SoftwareUpdateDocumentation/86ea5441393e1f0b96656bb5ad56364b308b7ca6.zip And is identified in AMP for Endpoints as: W32.6B9A473044-95.SBX.TG With SHA of: 6b9a47304497324fe40e3ccfba43bbb056c152500550849d1597fc47b4ebab35
... View more
Oct 21 2020
8:54 AM
2 Kudos
Which part is considered "The Issue"? Is it the problem in general with Apple swapping MAC addresses, or is it that even with randomization turned off, its still happening? We don't have MDM, and walking people though settings is not realistic.
... View more
Oct 19 2020
12:33 PM
1 Kudo
I dont think there is a way to limit the alerts on a per-scope or VLAN. I think that might end up being the Meraki work around though. Seems like Android is going to do a similar thing.
... View more
Sep 28 2020
5:26 AM
2 Kudos
Took DHCP leases down to an hour, still getting these stupid alerts. Dont want to disable the alerts, but we currently do not have MDM. So looks like I am going to be losing alerting for this... Fun.
... View more
Sep 24 2020
10:55 AM
1 Kudo
I have multiple sites sending alerts for IP conflicts recently. It is only iPhones, and only on our wireless. I have SSIDs and a VLAN setup dedicated just to mobile phones, and the MX running as DHCP server for that VLAN. This was not an issue until two or three weeks ago but we are getting two to three alerts for different sites almost every day. Anyone have any idea where to start looking on how to fix this? Is this another iOS bug?
... View more
May 26 2020
7:52 AM
You have a model number for one you have good experience with? Most of these places we have these installed at cant get internet or cable so getting 5G there is going to be pretty far off. But the option to have an additional antenna is appealing. Am I the only one wishing for a Starlink waiting list?
... View more
May 21 2020
8:22 PM
Yea that thing is way to expensive for what it is and than pairing it with the licensing it seems ridiculous. Unless there is something major I am missing.
... View more
May 21 2020
1:56 PM
So we have a handful of sites that rely on Verizon USB failover. The new models they are selling are horrible and after firmware updates the old ones are now less reliable than they have been. Want to find something that will give me an ethernet handoff instead of a USB one. Im in the energy industry so anything huawei is out. Anyone have any other recommendation?
... View more
Mar 6 2020
8:23 AM
For anyone still looking, just ran into this issue myself. For some reason the pre-existing firewall rule for port 1812 is garbage and doesn't work. If you disable Windows firewall or make a new rule to allow just port 1812 everything functions as it should.
... View more
Aug 5 2019
12:34 PM
What I have done in the past is send a IP scan for the subnet over the VPN from another location. We have security cameras and a lot of other things scattered around multiple sites that has plenty of L2 traffic but nothing that ever needs to hit the logic of the MX. So usually I just send some type of IP traffic from another VLAN and give it a few seconds to populate.
... View more
Apr 22 2019
6:34 AM
Ive used P2P before, but with Meraki are you sure that it is going to decrease the speed by half? I understand most APs but Meraki has a bunch of built in dedicated stuff and since they all support mess fail over I think it would be a great over site not to have a dedicated band that can be used for P2P data. And for the AP was thinking more of "Do I need to go to MR84 or will MR74 be enough?" Havent used Meraki for P2P only Unifi and a bit of Mikrotik and they both have models specifically for P2P.
... View more
Apr 22 2019
6:00 AM
I have a location that I need to set up I am thinking three APs. One will be at the main building and pointing in the direction of the other 2. The thing is this is a 100% band-aid job for a cheapo security system. So what I need is below. AP at main building - Broadcast 3 hidden SSIDs, each with own VLAN AP at pole 1 - 1 SSID, one VLAN AP at pole 2 - 2 SSIDs, VLAN for each, heading to a 8 port and out. Other then the possibility of the broadcast area not hitting both remote APs, does anyone see any possible pain points? the APs will be in almost a straight line but at a incline which looks to be giving both remote APs direct line of site over ~800ft back to main AP. And does anyone have any suggestions for AP+Antennas? Like I said almost straight line but on an incline allowing clear line of site as distant AP is about 50 ft higher, first remote AP at ~300ft and second almost directly behind it at ~800ft. *Cheapo camera system claims to be IP but needs plugged directly into DVR and into specific port. Tested and I can run over my switch network as long as I keep it on a dedicated VLAN, per camera, the entire way back to DVR otherwise DVR refuses to see camera.
... View more
Apr 16 2019
1:55 PM
So we have two sites that have a EPL connection between them. Both have MX100s with the EPL currently connected directly in and than L3 switches behind them both. Currently whoever set it up prior to be made a bunch of static routes. I would like to move the EPL to the L3 switches, leave the broadband service connected to MX100's. And be able to use the EPL in the event one of the sites broadband goes down. Issue I am having is I do not know how to tell the L3 switches (One site is MS250s, one is Cisco 3850's) to switch from passing default from MX to EPL when Broadband goes down. Any suggestions?
... View more
Apr 15 2019
12:25 PM
Yea thats the boat I was in and hoping I could VLAN tag the Client VPN. Issue I have with doing this at one site is I am getting hundreds of dropped events an hour and want to limit the amount of work the MX is doing to try and limit that. Moved L3 switching to switch but looks like I can only do that to a limited scale.
... View more
Apr 15 2019
12:21 PM
Yea I was trying to do it on the same subnet was hoping I would be able to make it work. Looks like Im not going to be able to. Thanks.
... View more
Apr 15 2019
11:33 AM
But is there any way I can define this in the L3 switch as a VLAN? The case I am working on right now is this VPN needs to join a VLAN that is present on my switch network. But without a VLAN on the MX I feel that I am going to run into issues. Or am I going to need to have two subnets dedicated to this one function? (One for equipment on network and another for VPN)
... View more
Apr 15 2019
9:15 AM
2 Kudos
You can also build a group policy and apply it as the default policy for the VLAN you are using.
... View more
Apr 15 2019
9:13 AM
Have some questions about the Client VPN hoping someone can clarify it up a bit for me. Is there anyway to classify it as a VLAN at all? We have non-Meraki L3 switches at a few sites and not entirely sure how to handle the VPN subnet. Don't want to start pruning VLANs on trunk ports and kill access for the Client VPN. I would like to give Client VPN access to one site that has site to site VPN access, without giving the Client VPN access to the entire organization, and limit it to only one or two IPs on the local network. Can I do that? Even with a L3 switch handling the routing?
... View more
If its showing active on switch an not in clients list that means its traffic is not leaving your network and is localized. Track back to switch port he is in and shut it down there.
... View more
If your hoping to console anything with Meraki, your going to have a bad time... Aside from that the group Policy I am talking about is in Meraki. Network wide -> Configure -> Group Policy. Than find the device in the Client list, click left box and above the check box at top of list is the Policy drop down. There is actually a "Blocked" by default so you can just use that.
... View more
I would disable port 7. might be something weird, I would do a IP scan on the subnet see if you can get it. Also what I would do is make a group policy destroying internet access and blocking all the things and assign it to that device.
... View more
Apr 8 2019
11:44 AM
I'm getting a very Apple kind of "We know what you want better than you." type of situation. Is Meraki going to give me viability to anything additional through SNMP or are we shut out of it all?
... View more
Apr 8 2019
6:01 AM
BrechtSchamp I must have something wrong I'm not getting anything from the SNMP walk. And even if I did I'm having a difficulty trying to figure out how to actually join OpManager and Meraki. Was hoping to get some groundwork done prior to scheduling a demo but I don't think its going to happen. MarcP You guys happy with Solarwinds? I want something that is going to give me all the monitoring that the dashboard has but also include what I feel are major shortcomings like load percentage, hardware status, and event monitoring better than "Hey we dropped 900 events, we was busy so figured since something was definitely happening it would be less important to record what was going on so we just gave up. Good luck troubleshooting!"
... View more
Apr 6 2019
9:06 PM
Has anyone implemented any additional Network Monitoring? I am looking at OpManager and Solarwinds. Both claim are compatible. Currently starting trial for OpManager but cant seem to figure out how to connect it to the dashboard at all. But looking to see if anyone has any tips or recommendations.
... View more
Labels:
- Labels:
-
Dashboard API
Mar 29 2019
12:41 PM
Currently I am waiting to hear back from them, see if there is a possibility for them to keep the access and functions that they need, and turn off NAT on there router and change gateway address on their DHCP to my MX. Anyone see any problems that would arise from that?
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 5853 | Apr 9 2019 11:49 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 29058 | |
| 2 | 30795 | |
| 2 | 33136 | |
| 2 | 2822 | |
| 1 | 31061 |
© 2024 Cisco Systems, Inc.
