Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About TL_Arwen
TL_Arwen
Getting noticed
Member since Mar 5, 2019
Oct 7 2020
Community Record
26
Posts
3
Kudos
1
Solution
Badges
Oct 7 2020
10:54 AM
Update: I was able to get a 200 ok response. but the settings do not actually import. Below I get a message saying This request does not have any tests.
... View more
Oct 2 2020
2:34 PM
I am trying to make my life a hell of a lot easier by using API to add entries to a group policy I created for inter-VLAN traffic. I want to use runner in postman to utilize a CSV that I am creating to add all of these entries. I got some of the basic stuff in there like ogranizationId, networkId, my key, shard, & groupPolicyId. The part I am not too sure on is what the headers are for the L3 part in the group policy. Any ideas?
... View more
Labels:
- Labels:
-
Dashboard API
Jan 31 2020
1:30 PM
Not that I'm aware of. Maybe post some screenshots blanking out any details you shouldn't share.
... View more
Jan 31 2020
1:24 PM
Keep your secret key simple was the big thing. If I over complicated it, it wouldn't work.
... View more
Jan 31 2020
1:10 PM
I did get it working. I'm using server 2012 R2, though. I'm betting the setup isn't too different, though.
... View more
Dec 18 2019
2:33 PM
Looking through some of the events, it's looking like a lot of the issues are not even from that AP, but from a different one. And most of them have to do with a wrong password being inputted. Kind of odd that they don't get that from other AP's.
... View more
Dec 18 2019
12:54 PM
It's mostly phones that connect to the wifi. We notice the issue mostly in the lunchroom and there's about 15 people or so and generally some are playing mobile games. I wouldn't have thought that 15 people in there would cause any issue, but it seems to be the case every day around lunch time as more people come in.
... View more
Dec 18 2019
10:38 AM
Does anyone know how many connected devices the MR20 can handle? We are having intermittent issues where devices show they are connected to the wireless network, but no connectivity is working. On phones, I typically see a ! next to the connection. It seems to happen when there's quite a few (not that many in the grand scheme of things) people connected.
... View more
Nov 27 2019
9:00 AM
1 Kudo
Create cert: https://www.sslshopper.com/article-how-to-create-a-self-signed-certificate-in-iis-7.html Migrate cert to AD server: https://www.sslshopper.com/move-or-copy-an-ssl-certificate-from-a-windows-server-to-another-windows-server.html
... View more
Nov 27 2019
7:51 AM
Can you not install iis on your domain controller? Or on another server?
... View more
Jul 2 2019
12:55 PM
@SoCalRacer wrote: Looks like you have been working on this for almost 2 weeks. I know you mentioned support wouldnt help with radius, but they should be able to help with device pings not working. Have you contacted them about that? No, not about that. I figured they would tell me to talk to MS support or something. They have not been great help with this at all. I will send off an e-mail to see if they will help.
... View more
Jul 2 2019
10:31 AM
So as of this morning when doing some tests, I can ping the DC's, but anything else, I get a timed out. I am able to ping when local.
... View more
Jun 28 2019
8:24 AM
Not sure what changed. But somehow this morning when I tested it on a windows computer, the VPN worked. tested the connection on my phone. had to use domain\username, but it connected. I am however unable to access any local resources in the network. I cannot ping servers or access network shares. In event viewer, when I connect, I get this: Network Policy Server granted full access to a user because the host met the defined health policy. So it sounds like I should have full network access, but I don't.
... View more
Jun 24 2019
11:24 AM
@SoCalRacer wrote: Re: Meraki VPN Som eusers get 691 error when authenticating with Radius Might check that thread there are a couple things to double check I took a look at that guy's solution. Ran the command to see if there were any users with that issue but it didn't return any.
... View more
Jun 24 2019
7:25 AM
@PhilipDAth wrote: Ok, so we know it is strictly a RADIUS issue now. In the Windows Event log under "Application" does Network Policy Server log it is sending an ACCES ACCEPT or an ACCESS REJECT? If you are getting a REJECT you need to look at the rest of the event log entry to see why. If you get no log entry at all it usually means the RADIUS key configured on Meraki and the NPS server under clients doesn't match. So, I am not getting any messages in the event viewer of the RADIUS server. I also checked the secret key between the Meraki and the RADIUS server. I even as a test made it a simple short word.
... View more
Jun 21 2019
3:12 PM
@PhilipDAth wrote: Error code 691 can be caused when the pre-shared key doesn't match. If you don't mind, could we try breaking the problem into smaller chunks. I've had error 691 before when the pre-shared key was too complex, and either Meraki or the client couldn't handle special characters (don't know which). Could you try changing the pre-shared key to something simple like "password". If that resolves it then change it to something more complicated, but not as complex as you had before. If that doesn't resolve it, stick with using password and change to using "Meraki Authentication". If this resolves it then we know the VPN part is fine, it is something to do with the RADIUS setup that is not working. If it is still broken then it is fudamentally something wrong with the VPN side. If it is still not working please try disabling antivirus or anything that installs a network shim. For example, Dell computers are famous for coming with some software called "SmartByte" which breaks the Windows VPN. I tried it with a simple password and doing the meraki authentication. That works. Same IPSEC password but on RADIUS doesn't work even with a simple password between the RADIUS and meraki. Disabled windows firewall as a test.
... View more
Jun 21 2019
3:02 PM
@PhilipDAth wrote: Are you running 14.39 or better firmware on your MX? Does the Windows 10 machine return an error code? Does your MX have a public IP address directly on it, or is it sitting behind something else doing NAT? It is running 14.39. Error code 691. It has a public IP.
... View more
Jun 21 2019
9:32 AM
@SoCalRacer wrote: My suggestion is to start with a Windows 10 device doing the client VPN. Once you know that is working then start on the mobile devices. The reason I say that, there are so many variables especially with Android devices on the VPN connection/settings. So I'm trying it with a windows 10 device and getting this: Jun 21 09:29:48 Non-Meraki / Client VPN negotiation msg: invalid DH group 19. Jun 21 09:29:48 Non-Meraki / Client VPN negotiation msg: invalid DH group 20. Jun 21 09:29:48 Non-Meraki / Client VPN negotiation msg: received broken Microsoft ID: MS NT5 ISAKMPOAKLEY
... View more
Jun 20 2019
1:50 PM
Here is my scenerio: I have a meraki MX 84. I setup a RADIUS server on a windows server 2012 R2. I configured it according to the directions here: https://documentation.meraki.com/MX/Client_VPN/Configuring_RADIUS_Authentication_with_Client_VPN Testing this on my samsung phone, I get a connection unsuccessful message on the phone and in the Meraki logs, I get: Jun 20 13:34:26 Non-Meraki / Client VPN negotiation msg: phase1 negotiation failed. Jun 20 13:34:26 Non-Meraki / Client VPN negotiation msg: failed to pre-process ph1 packet (side: 1, status 1). Jun 20 13:34:26 Non-Meraki / Client VPN negotiation msg: failed to get valid proposal. Jun 20 13:34:26 Non-Meraki / Client VPN negotiation msg: no suitable proposal found. I need to get this going for specific users in AD as our old VPN device is expiring and being retired. Meraki support won't help troubleshoot the radius server
... View more
Mar 28 2019
12:17 PM
I was going to make different policies for each protocol (http & https) but this will probably work better. Not sure why I didn't think of that before. haha
... View more
Mar 28 2019
12:04 PM
Our network has the subnet of 172.16.0.0/12 and I am trying to make it so that none of the computers on the 172.20.0.0/16 part of that cannot route outside. I set a rule in the firewall for the following but it does not work. Deny TCP 172.20.0.0/16 Any Any 80 Deny HTTP Any ideas on how I can deny that subnet outbound traffic?
... View more
Mar 11 2019
7:52 AM
1 Kudo
I added the cert to the trusted store and I found out that I was putting in the wrong info into the portal. I thought that if my domain controller was say dc1.domain.com the short domain would be domain because that is the actual domain name. but I had to put the name of the DC in. Doesn't make sense in my eyes... So once I made that change, it worked.
... View more
Mar 7 2019
2:01 PM
@PhilipDAth wrote: The certificate should be located in the machine personal store. I added it to the personal store and I still got the same error.
... View more
Mar 7 2019
8:50 AM
1 Kudo
@BrechtSchamp wrote: I assume you saw this from your link: ldap_start_tls: Server is Unavailable Error Description - The MX uses TLS to secure the LDAP connection to the domain controller. This error indicates the MX received an Error initializing TLS response from the domain controller when attempting to establish TLS. Error Solution: To resolve issues with TLS, please verify the following: The domain controller has a valid certificate installed. The domain controller supports STARTTLS. Since the MX does not support LDAP over SSL, it uses STARTTLS instead. Yes. I may have missed something, but not sure how or what.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 26195 | Mar 11 2019 7:52 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 23863 | |
| 1 | 26195 | |
| 1 | 26286 |
© 2024 Cisco Systems, Inc.
