Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About ArshadSafrulla
Community Record
13
Posts
3
Kudos
0
Solutions
Badges
02-26-2021
01:53 PM
If you have geo-separation based networks in your organization only way is Layer 3 concentrator. But there are very well known bugs which causes packet drops in this mode. Rather I would recommend bring all of your AP's to one single network under your organization, and use Bridge mode. Only in cases where there is a coverage hole when roaming client will have to go through the whole auth process again, otherwise it will be a seamless roam.
... View more
02-26-2021
01:45 PM
I would use Meraki MR74 with patch antennas. You have to make sure that you have line of sight and RF profiles are properly surveyed and configured to exclude DFS networks, use the best channels preferably in 5GHz etc.
... View more
02-26-2021
01:37 PM
I would highly recommend to look in to CWA with Cisco ISE, what you are looking for can be done only by presenting the client with a splash page. Cisco ISE can be integrated with any supported and compatible MFA service provider and then use CWA process (Guest device compliance)
... View more
02-26-2021
01:21 PM
It is possible that Air Marshall is showing historical data, you can verify it by simply peeking in to the Last seen column under Air Marshall ==> Rogue SSIDs. FYI. It is expected behavior that meraki setup SSID to be flagged as Rogue SSID as it is not advertised ny an AP which belongs to ur Network or organization. Meraki Setup SSID is advertised by APs which are not added to any network.
... View more
02-26-2021
01:16 PM
1 Kudo
You can add MAC addresses by going to Network-wide ==> Clients ==> Add Client, you can also choose a group policy if you required to have custom firewall rules, shaping etc. However MAC address based restrictions are not the best thing to do as this can be easily spoofed. I would highly recommend looking in to deploying 802.1X with EAP-TLS or using Meraki MDM to manage and restrict the devices which will be using the SSID's.
... View more
02-08-2020
12:36 PM
Hi Guys, I am trying to understand below section cropped from the SSID tunneling page from Meraki Page. Could you please guide me where I have to add the Meraki MX as my Radius Authenticator. I am really confused with this documentation
... View more
02-08-2020
12:33 PM
Hi, Go to Dahsboard===>Wireless===>Firewall & Traffic Shaping Turn off the default traffic shaping rules under the SSID you are connecting.
... View more
02-01-2020
02:36 PM
Hi Experts, I have 2 links in my MX Firewall, while the primary link is a Internet Conenction which is used only for Management, second link is a private MPLS link from Service provider which is providing connectivity our other sites. I hav requirement where one of my devices in one of my remote site needs to establish an IPSEC tunnel with my MX over the Private IP. In this case what would be my Meraki peer IP, and how can I achieve this design? Also I have a requirement where my Wireless Concentrate MX is sitting in my DC which is having single uplink, in case of wireless SSID traffic flow, does it go to Internet and then come back to MX over it's public IP?
... View more
03-13-2019
12:44 PM
Set the native vlan on Meraki side trunk to the VLAN you want the IP from.
... View more
03-13-2019
12:43 PM
2 Kudos
I would change the native vlan on both the side to match the management vlan
... View more
03-13-2019
12:38 PM
1st of all why are you configuring this port as a trunk? If it is connected to a phone it should be access port.
... View more
03-13-2019
12:12 PM
It will just show up in the inventory. Nothing much can be done.
... View more
My Top Kudoed Posts
