About UCcert

KarstenI

You VLAN-Settings are preserved, but not the interface assignments. And you need to configure your uplink by hand, without that the device can not get the config from the dashboard.

ww

Its not just ping. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Connection_Monitoring_for_WAN_Failover#Connectivity_Tests

misterguitar

AVOID these switches like the plague.Trust me on this. Unless you want to explain to managers why you spent vast sums of money on equipment that doesn't work. And you enjoy downtime and tons of intermittent unsolvable issues. Scan the forums here. these MS390 switches look good on paper but DO NOT WORK. DO not risk your career future by buying these defective bombs.

dwash

Thank you all for your suggestions! All of this has given me a very solid starting point!

KarstenI

Why do you want to reset the camera? Are there any problems with it? If yes, one troubleshooting step could be do move the camera to a new network and later move it back. Sometimes problems disappear this way.

UCcert

I’m not familiar with working with templates but couldn’t you pull the site out of the sd-wan by removing the local VLANs out of the tunnel.

UCcert

Hi @Dipen document your existing pfsense configuration ie firewall rules, vpns. Claim your Meraki device in the dashboard and start building out your config MX install guides: https://documentation.meraki.com/MX/MX_Installation_Guides

Shadius

@UCcert The trace route shows it timing out on the 4th hop. After inputting a static route on the WAN router for it to go to the Cradlepoint E3000 Router (172.16.150.9), the trace route shows it starts at the interface IP (172.16.150.11), then goes to the Cradlepoint E3000 Router's IP, but times out from the 4th hop to the 8th hop, then resumes on the 9th hop. When removing the static route of 172.16.150.9, there is no timeout, but computers get 1Mbps speeds, which is our WAN circuit speeds. Also, a speed test ran from the Cradlepoint's NetCloud Manager resulted in over 100Mbps speeds. Here's a screenshot:

KarstenI

@BlakeRichardson I am not sure if the API is the solution. Probably receiving Webhooks is better here. It could count the customers affected and also evaluate the strength of the impact. But I have no idea how to connect that to HomeKit. Ok, I didn't search for it for now. Even more elegant would be an integration of the Meraki iOS-App into Apple Shortcuts. Choosing a Light-Szene based on Events from the App would be really nice.

rymiles

I'm the "support" guy 😉 Actually, just a field TSA (SE) pitching in where possible to get folks back up and running. Anyway, in this case due to a prior support case firmware was statically set or pinned we call it. For whatever reason it was only pinned on one of the two MX's in the HA pair. That's no good and the HA pair was seeing lots of VRRP transitions and dual master situations. @IllinoisCollege to your point about load on the MX that is something I noticed and might be an issue. You look to be at the upper limit of clients we recommend on a MX450. You might want to engage Support again as they can see more info than I can with regards to flow counts etc that would show the true load on the MX.

mikeos

Hey AKH223 in the end the problem was we have om1 fiber in the building with lrm transceivers the issue was because the patch cables where dirty, nnot the right type and not plugged in correctly. once I had everything plugged in correctly with the right cables and transceiver and plug in the correct way with fiber conditioning cables we now have 30 closets stable at 20g per closet and has been rock solid hope this helps you out

rymiles

cmr is pretty close here. At times supplies/suppliers need to change subcomponents and it means a hardware rev change. Key here is functionality and performance are expected to be the same regardless of rev. And no, it's not beta nor did it get mGig. The MX250 already has 10G WAN and LAN ports anyway 😉

CaptainBeRad

I've had this problem with a bunch of customers. When Microsoft updates the built in windows VPN components it resets some parameters and breaks the VPN. Start looking at switching to AnyConnect instead, works much better. The licensing is not huge money either.

UCcert

no reason why both platforms couldn't be tweaked to avoid channel overlaps.

UCcert

no mention in here with regards the ability to change the body, header, footer etc https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Alerts_and_Notifications

lanwifidtg

Thanks to all of you, I will inquire via API what can be done, I have found this script to make MX backups, also an app for it. https://github.com/meraki/automation-scripts/blob/master/mxfirewallcontrol.py --> script MX backup https://apps.meraki.io/details/v-app-cloud-network-backup-1/ https://my.v-app.io/myaccount

UCcert

Yeah, Meraki have been price matching the MR44’s to the 36’s for a good few months. This summer one customer got a full upgrade from the MR36’s to the 44’s and also Full PoE switches from the LP’s. That was one happy customer.

UCcert

Hi @FlyingFrames , it’ll be too late to RMA but if you email Meraki support and they’ll convert the license to the Adv Security one. You will however see the license expiration date half.

FlyingFrames

Will the sales rep be able to provide a new license key for free or do some backend magic to let the dashboard run free for a few months?

BrandonS

I agree, one or two is probably enough, but it depends on other factors. Cisco has a free predictive survey tool you may like to try: https://rftool.cisco.com

UCcert

As pointed out, unclaim and RMA as quickly as you can.

UCcert

Yep, never liked this limitation with the inability to mix MX licenses. As previously pointed you can’t build auto-VPNs between different Orgs. You can however of course build old skool site to site VPNs. Might take some planning on how you build this one out. Or, if your Meraki is feeling generous they can seriously discount so you can get the same licenses across the board.

dizzysn

Even the tech support line?

Gillic01

Our company has had issue with 15.44 where two separate mx 450 just stopped responding and had to be powercycled. Happened once then again 30 days later.

UCcert

Hi @bluecat , as you’ve already stated, your safest bet here is to disconnect the WAN port. Or, is your ISP able to shut down their port connection to your MX? Then when done re-enable.

UCcert

Darren O'Connor

Community Record

Badges