About UCcert

AlexanderL

Flashback to dealing with punch-downs in college... ohh boy. Awesome work.

AlexanderL

Alright, that's awesome.

Bruce

@cmr you are correct in that Meraki switches will physically accept standard QSFP transceivers in the rear stacking ports (since mechanically that’s all they are), but my understanding is it’s not supported, and in most cases won’t work - you’re pretty much restricted to the cables Meraki specify as ‘stacking cables’. With the Flexible Stacking on the MS425, Meraki fully support all the transceivers supported in the MS425 for stacking, so you can do long distance stacking if you want. I’ve never tried to long distance stack anything other than a MS425 (which works fine), and above is consistently what I’ve been told by our local Meraki CSE team.

Bruce

If you’re doing a migration then start with the hub. Put the hub MX in the network, but keep the hub ASA too. Then as you migrate each site change the routing at the hub site to use the MX rather than the ASA. You can even put the MX ‘in front’ for the ASA so the the MX becomes your internet gateway, and use port forwards so that the existing Cisco 800 series devices can connect to the ASA until migrated.

MarcP

Maybe four, assuming MX03-HA is a different one as MX03, as it is listet on its own. - 03 online MX: MX01, MX02, MX03 - 01 Warm spare MX: MX03-HA - 02 Backup MX in inventory

Inderdeep

Welcome to the community @FelixSantiago.

cmr

@RobertDick I had an issue where the connection to the primary hub kept dropping and the connection to the backup didn't properly take over. Some of the time...

UCcert

Hi @Akhilbhattar1 have you read through the Meraki AP and NPS document https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_with_WPA2-Enterprise Are your APs configured as RADIUS clients on your Radius server? What are the event viewer logs showing on the NPS server?

Inderdeep

Thanks @MeredithW : i got my first Meraki Swag today ..

KRobert

The link @UCcert provided first has a nice chart of what MS models support what kind of stacking. https://documentation.meraki.com/MS/Stacking/Switch_Stacks

GIdenJoe

@misterguitar, The VLAN setting in the switch -> switch settings screen is the default for all switches. Then you can input it again per switch which gives the option to override it per switch if you wanted. However if your upstream VLAN tagging in your uplink trunk you should not have gotten the warning when you only changed the VLAN setting on the switch itself.

PhilipDAth

> when I use the MS425 in the core and they won`t support the Adaptive Policy feature neithe If you buy the MS390 are you going to buy the "Advanced" licence as well to enabled Adaptive Policy?

CptnCrnch

@Inderdeep wrote: if you have advance security license then no body cares about the Cisco Umbrella as you have all the security features on the box. You won‘t be able to achieve even half of what Umbrella provides you with with an on-box solution.

cmr

@JoeN6R good luck and don't beat yourself up, we've all had disastrous installs so feel your pain 🤞

ww

You should try dual band operation. However you have to check your rf profile. That one is leading.

GreenMan

Secure traffic processing really happens on the local MX, where clients are connected - you will get limited protection, if you're relying on just the VPN Hub to (Advanced Security) process the traffic. You most likely need Adv Sec for the Spoke. This is one reason why we simplify everything to the same license level, per Org.

KRobert

Glad it is working!

cmr

CPU is same as 16.4, i.e. more than 15.x

Inderdeep

I saw SASE is part of next generation networks and is a part of sdwan journey. Cisco Viptela and Palo Alto cloudgenix has high investments in this journey. thanks for sharing this podcast @merakisimon and other community members

AB_LaDigue67

Let me c

CptnCrnch

Great job, gentlemen! 🤗

Inderdeep

I never received that CMNA polo shirt, how can I get that ?

GreenMan

Just one thing to add to this; there's only an implicit allow if the packet is received on a LAN interface. If it's on a WAN / Internet port (with no matching outbound session), it hits an implicit deny - of course!

Inderdeep

@SaiGanesh Looking forward to connect with you on various post and questions. Do share your experience as well

Inderdeep

Welcome to the party @Mandy_lally , stay tuned you will get a lot from this community

UCcert

Community Record

Badges