Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About dalmiroy2k
dalmiroy2k
Getting noticed
Member since Mar 6, 2019
Jun 7 2024
Dalmiro Couto
Buenos Aires, Argentina
Community Record
40
Posts
19
Kudos
1
Solution
Badges
Sep 8 2022
12:02 PM
Hi guys. Cyber-security staff requires a daily usage report, that includes clients that connected to WIFI networks, their BW usage and which SSID they used. We are currently generating the report manually every day, using "Network-wide - clients" and downloading and manually editing de CSV file, importing it in excel and filtering the rows we need. Cyber-security staff has asked us If Meraki can automate this task, maybe enabling some beta feature or via API. Or maybe enabling an extra option in Summary report (I could find it there, only top users usage, not all of them). Besides I would have to generate a single report for every SSID. In conclusion, Is there any way we can have a daily automatic client SSID usage report, Just like the one you get exporting the CVS in clients view, delivered via email or any other way? Regards
... View more
Dec 19 2019
9:09 AM
Great point BrechtSchamp. /24 subnets were allowed during initial setup but I should setup the servers addresses only.
... View more
Dec 19 2019
7:18 AM
Hi guys, I currently running a Hub-and-spoke topology and I only need remote endpoints to reach both a local DNS and an HTTPS internal web page in the HQ subnet. So far I have enabled those subnets and ports and a implicit deny all at the bottom (on top of the implicit allow all). My objective is reduce malware propagation and threats originated internally through the VPN (Ports scans, DDoS). Both Endpoints and HQ have Advanced licence with IDS set @ Prevention / Security I was wondering what are you Site-to-site outbound firewall best practices? Any other tip to control and secure VPN usage? Thanks!
... View more
Nov 27 2019
4:27 AM
1 Kudo
I have tried Cisco 887VA with both ADSL and VDSL modes and it works great alongside Meraki MX 64. When using SOHO Huawei and ZTE ADSL modems, my client refused to use bridge mode, so in that case I had to disable their onboard firewalls/WIFI and set DMZ to Meraki DHCP-obtained WAN IP, so Auto-VPN would be green-lighted. It would be nice if MX had PPPoE dial-up support in the Uplink dashboard, for either WAN1 o WAN2.
... View more
Jul 19 2019
11:57 AM
1 Kudo
If you have an MX, go to Security & SD-WAN | Firewall | Layer 7 firewall
... View more
Jul 19 2019
11:51 AM
Check this documentation: https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair Is Your Spare unit in "Passive - Ready" state? Are you using virtual uplink IPs? Nat mode?
... View more
Jul 11 2019
5:14 AM
2 Kudos
Go to the port settings in Switch | Switch Ports and disable both RSTP and STP guard.
... View more
Jul 11 2019
5:09 AM
craddockc , There is currently a bug in Apple devices like iphones and Ipads when using WPA2 PSK, that may be related to your problem. Please check if your clients are using iOS devices. Event log display the dropout like this: Jun 17 18:11:40 MR33 IPA iPad Jorge 802.11 association channel: 11, rssi: 23 Jun 17 18:08:27 MR33 IPA iPad Jorge 802.11 disassociation client has left AP Jun 17 18:08:27 MR33 IPA iPad Jorge WPA deauthentication radio: 0, vap: 0, client_mac: 48:3B:38:9F:A8:3B more » Jun 17 18:08:23 MR33 IPA iPad Jorge WPA authentication Jun 17 18:08:23 MR33 IPA iPad Jorge 802.11 association channel: 11, rssi: 27 Jun 17 18:03:13 MR33 IPA iPad Jorge 802.11 disassociation client association expired Jun 17 18:03:13 MR33 IPA iPad Jorge WPA deauthentication radio: 0, vap: 0, client_mac: 48:3B:3 The issue we identified in this case that can cause intermittent failures to connect to a PSK Wi-Fi network has been resolved in the iOS 13 beta.
... View more
Jul 11 2019
4:57 AM
I'm gonna try the same with MX64 and post results. It would be great as it would spare one power outlet from my overcrowded UPS. EDITED: No luck with MX64 so far 😞
... View more
Jul 10 2019
1:19 PM
1 Kudo
I believe VLANs 90 and 91 should also be "Allowed VLANs" In your "Per-port VLAN Settings". I don't see them in your screenshot.
... View more
Jul 4 2019
8:21 AM
1 Kudo
I'm using the following Ethernet 4G routers: Huawei B310 Huawei AR 160 Series (AR169FGVW-L) Can't be beated in both price and complete LTE band coverage.
... View more
Jul 4 2019
5:28 AM
It's a security risk to leave local pages open on corporate or public networks. You should only enable them when and if you need to troubleshoot something or if you have a home network.
... View more
Jul 4 2019
3:44 AM
1 Kudo
Go to "network -wide" - "General"
... View more
Jul 2 2019
12:30 PM
You can use Active Directory validation or, if you have system manager licences, Systems Manager Sentry VPN security validation. https://n129.meraki.com/manage/support?search_term=4057
... View more
Jul 2 2019
11:56 AM
1 Kudo
The hostname xxxxx-yyyy.dynamic-m.com works like a free dynamic DNS included with your MX appliance. it should be pingeable from internet. Event log should give you more information of what it went wrong with the VPN session. You should test the VPN client session with your admin account. Configure the L2TP session in your smartphone with your admin account and check everything is working fine. If by any chance you have System Manager licences and a combined network, you can automatically push VPN profiles to your enrolled devices. it works great.
... View more
Jul 2 2019
5:41 AM
VLAN 1 is usually reserved for Meraki Management. I had the same problem with MR33, that it could still connect to VLAN 1 when it shouldn't. Can you reconfigure VLAN 1 to something else, like VLAN 2?
... View more
Jul 2 2019
5:30 AM
2 Kudos
When you insert a supported 3G/4G USB modem (dongle) in your Meraki MX USB port, it you display it's status on Security & SD-WAN | Appliance Status There is no much else you can do. You can't manage anything related to your dongle like signal status or IP assignment. The only thing you can assign is a Bandwidth limit So, if you are gonna use a USB dongle, you should pre-configure it with a private IP address from your local subnet, like 192.168.0.100. This way, you can still manage the internal web portal your modem probably has and check things like signal status or SMS. Algo, your Dongle connection should be bridged, with NAT, firewalling and it's onboard WIFI DISABLED.
... View more
Jun 28 2019
5:44 AM
You will have better luck using an external Ethernet 4G/5G modem via WAN 2 (supports both load-balancing and failover) or a USB Dongle for cellular backup. I know Huawei and ZTE are somehow banned or disliked in the US, but here in latin america they can't be beated in both cost and complete LTE band support. I'm currently using a Huawei E3276 as cellular backup for my MX64.
... View more
Jun 25 2019
9:09 AM
Sometimes the client device automatically chooses 2.4 GHz instead of 5 GHz, usually when it's far from the nearest AP and the signal is low. It's normal, but anyway make sure you have "Dual band operation with Band Steering" enabled on your SSID.
... View more
Jun 25 2019
9:05 AM
1 Kudo
I had the same problem with my IDevices on my home network. On a regular use, with a 5 GHZ SSID with WPA2 PSK validation, session dropped when the iDevice was idle. Jun 18 08:20:56 MR33 IPA iPhone Dal 802.11 disassociation client has left AP Jun 18 08:20:56 MR33 IPA iPhone Dal WPA deauthentication radio: 0, vap: 0, client_mac: 6C:72:E7:9B:91:66 more » Jun 18 07:52:08 MR33 IPA iPhone Dal WPA authentication Jun 18 07:52:08 MR33 IPA iPhone Dal 802.11 association channel: 11, rssi: 28 Jun 17 19:25:22 MR33 IPA iPad Jorge 802.11 disassociation client has left AP Jun 17 18:11:40 MR33 IPA iPad Jorge WPA authentication Jun 17 18:11:40 MR33 IPA iPad Jorge 802.11 association channel: 11, rssi: 23 I tried most tips on Meraki MR troubleshooting. It got somehow fixed pushing (and forcing) a custom WIFI profile via System Manager, enabling Cisco Fast Lane and Sentry validation, but that solution doesn't apply to you problem. I recommend opening a case in Meraki help center.
... View more
Jun 25 2019
5:35 AM
Yeah, I agree. I would love a future option to completely disable 2.4 GHz radio propagation (even scanning). It's a waste of power in my case.
... View more
Jun 24 2019
12:35 PM
3 Kudos
I have a new avatar!
... View more
Jun 24 2019
12:15 PM
I have the same question. While SSID broadcast is disabled on 2.4 GHZ, the radio is still on and I can't find a way to completely disable 2.4ghz band.
... View more
Jun 10 2019
11:55 AM
I would add capped max uplink bandwidth. Example: MX64 can only process up to 250 Mb WAN. Cisco ISR 4000 series suffer the same fate, unless you use the Boost Licence which unlock the limitations.
... View more
May 31 2019
11:33 AM
Meraki MR20 should be fine for that deploy. https://meraki.cisco.com/products/wireless/mr20#tech-specs
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 6329 | Jul 11 2019 5:14 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 3 | 39417 | |
| 3 | 7063 | |
| 2 | 6329 | |
| 2 | 2297 | |
| 2 | 27560 |
© 2024 Cisco Systems, Inc.
