Meraki

DarrenOC

Assume this is a long standing network and the issues have just started happening? Dont rush into making lots of sporadic changes in the hope of resolving the issue.

DarrenOC

Throughout all this I assume your network devices have remained stable and haven’t lost registration to the Meraki dashboard? These devices are on VLAN 1 or another Management VLAN?

DarrenOC

Is the issue site wide or are you able to isolate to a building and switch stack? On your MX - do you have firewall rules in place here that restrict port 8080 and 443? Is this affecting both wired and wireless users?

DarrenOC

Hi @Mark-SPS, dependant on your needs I’d move all the L3 interfaces up to the MX. That way I can control inter-vlan routing and segment my network accordingly.

DarrenOC

That’s the implicit deny inbound rule. By default, outbound everything is allowed. I would suggest that you configure your outbound rules as required with a final Deny Any Any at the end.

DarrenOC

Have you had TAC review the status of the switches at all? Could be a process that gradually grinds to a halt or the reverse causing a spike which knocks the stack offline.

DarrenOC

Syslog, syslog, syslog……

DarrenOC

Love that comment @RaphaelL “iam young and looking for the nightlife”. Enjoy and make the most of it.

DarrenOC

Remove the Trial eqpt from the Network it resides in. You could also go a step further and delete the eqpt from that Org

DarrenOC

Are the issues happening in certain spots or is this a site wide problem? I had one client who literally couldn’t use their devices in a certain area. After running some survey software I found 2 old APs on the network that were broadcasting the same SSID. Once removed…all was well.

DarrenOC

Hi @CarolineS - I did look to delete!

DarrenOC

Sorry to have been alarmist! Was just me. I was prepping for a number of changes and I couldn’t access the Meraki dashboard. Another customer had added me as an admin to their Org which caused some logging in issues. And at a time I could have done without the aggro.

DarrenOC

Anyone else struggling to access their dashboard at the moment? Password not being accepted, password recovery not working or accepting new password!

DarrenOC

Hi @Rafael_Cabrera - I just have to ask why? Why are you having to reset SSIDs so often it’s become an admin overhead?

DarrenOC

Congratulations to all. Nice to see some new faces in the new cohort

DarrenOC

Hi @garonson , this will work and is a pretty standard setup. Ensure the Forti is configured to allow the required ports and IPs out to the Meraki cloud.

DarrenOC

Great idea @TyShawn. Thinking off the cuff here but prior to each event the community could put forward some design or t/shooting issues that we vote on to see which one gets whiteboarded. If Meraki could spare one of their SMEs for each session that would be usef

DarrenOC

Hi @BrianVanoy , as previously mentioned, you can restrict inter vlan but not intra. You would need to move the printers into a new IP subnet and restrict that way.

DarrenOC

Agree with @ww - the switch can’t have its Management L3 VLAN interface on itself. So in your case the Management VLAN interface will reside on the MX

DarrenOC

Hi @AxL1971 , we have this deployed across a vast amount of sites with no reported issues. I believe it’s a feature that Meraki recommends you enable.

DarrenOC

Would agree - but then it depends….you don’t want to end up with too many SSIDs on your network

DarrenOC

Welcome. At least we can now stop writing “wrong forum”!

DarrenOC

To me it sounds like motion detection is just broken and not working as required. If they set an area to monitor and alert on the cameras are picking up motion outside of those areas.

DarrenOC

As always…it depends! - budget - overall solution design - Firewalling requirements within the DC - what issues or business requirements are you looking to address by implementing DC firewalls

DarrenOC

Hi @yaypingworks - depends…. Do you have many legacy clients utilising the 2.4Ghz spectrum? Band steering, as you’ve correctly pointed out, moves clients that are capable of 5Ghz to that frequency for a better user experience. Your wifi survey and respective design would provide a decent signal and coverage for both spectrums if required and band steering would be the icing on the cake with no compromises.

About DarrenOC

DarrenOC

Darren O'Connor

Community Record

Badges