About SoCalRacer

SoCalRacer

Shouldn't Meraki support be able to see the device overheating?

SoCalRacer

@Network-dad wrote: For just an small non Meraki in room AP I travel with one of these https://amzn.to/3glwRuC For a Meraki solution I travel with a Z3 https://meraki.cisco.com/product/security-sd-wan/teleworker/z3/ Pretty much my exact recommendation, also my preferred device is Z3C for travel since I use the T-Mobile SIM in it all the time. Screw Marriott Wifi! I usually bring a chromecast device and then I can stream pretty much anything I want and not be on the hotel wifi and I get wired access if needed. Only downside is TSA looks at you kind of funny.

SoCalRacer

The link was broken https://documentation.meraki.com/MG/MG21%2F%2F21E_Datasheet I have not done an MG21 in Ireland with Vodafone, but here is what I would offer a some steps to try. 1) Verify the SIM is active and works in another device (Mobile phone, another Meraki device, or USB modem) 2) Make sure you can get signal on a mobile phone on Vodafone where the MG is deployed 3) Verify if there is any special APN settings needed for the carrier ( I know Verizon static IP is this way in the US) 4) Verify the MG has connected to the Meraki cloud and got a firmware update (May need to be wired to do this) 5) Check the local status page of the MG and see if you are getting signal, if not its a signal issue, if so config issue.

SoCalRacer

Then yes the the DS is the one you want.

SoCalRacer

I would go with the DS then. I thought you mentioned you were already using these Skyus modems and you wanted to use something different.

SoCalRacer

Then I would go over this document carefully. Verizon seems to be a bit of a pain with a USB modem in Meraki. https://documentation.meraki.com/MX/Cellular/3G%2F%2F4G_Cellular_Failover_with_USB_Modems. Also note the USBID, if that isn't exact then you will have issues.

SoCalRacer

It depends on the Carrier, but we have used multiple carrier sims in this one. https://www.amazon.com/gp/product/B01M0JY15V/ref=ppx_yo_dt_b_asin_title_o00_s00?ie=UTF8&psc=1 It is a little expensive now $90, when we bought them over a a year ago they were $25 https://camelcamelcamel.com/product/B01M0JY15V Personally I would recommend staying away from usb modem, they are finicky and we only use them in temporary workaround situations. My Recommendations: 1) MG21 2) MX67C or something with an internal sim 3) Cradlepoint or other vendor using sim to ethernet 4) USB modem

SoCalRacer · ‎05-28-2020

There isn't any easy way. Just lessons learned. Screenshot everything on the Sonicwall. Backup config and firmware. Setup MX as best as possible before WAN switch over. Setup S2S VPN if needed. Setup VPN profile on clients if needed. Then cut over. Leave the Sonicwall up perferrably in a DMZ or Vlan or not even physically connected to the same network. That way any gotchas you can get in and check the exact settings and config.

SoCalRacer · ‎05-05-2020

Sounds like an issue on the server side, probably cert issue in the way it was installed/trusted/setup. Have you reviewed the below links? https://documentation.meraki.com/MR/Encryption_and_Authentication/Bypassing_Server_Certificate_Validation_for_Troubleshooting https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Certificate_Requirements_for_TLS https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_with_WPA2-Enterprise

SoCalRacer · ‎05-05-2020

Try adding "visible" = "true", "availableOnAllAps" = "false",

SoCalRacer · ‎04-24-2020

Also with off-site DHCP and DNS I would run constant ping plotter to them and see if the DC is the fault.

SoCalRacer · ‎04-24-2020

True you probably won't lose much, but not sure I would recommend the swap.

SoCalRacer · ‎04-24-2020

Possibly if AnyConnect gets implemented then we might have a chance.

SoCalRacer · ‎04-24-2020

I would contact support to have them help review your settings before doing it. There could be some gotchas but your org isn't super flat/simple so I would always recommend a second set of eyes

SoCalRacer · ‎04-24-2020

You can move it. I would say possibly the recommendation was made because there was another security device in the main network. You can only have one primary MX in each network.

SoCalRacer · ‎04-24-2020

I would say try RADIUS or implement hardware in place like Z3 or MR33 that can implement VPN to the main office. The other issue you will run into with locking down to single IP with home users is their public IP changing, it usually becomes a bigger headache than its worth depending on the amount of users.

SoCalRacer · ‎04-24-2020

Then I would say its possible an animal or weather did the damage. I would guess weather. If you experience high winds and possibly it was screwed on loosely. Over time it may have slowly loosened. When and if you get a chance you might check the other antennas to see if they are tight.

SoCalRacer · ‎04-24-2020

If possible to confirm your theory disable the WAN 2 and see if the complaints happen. If not possible, when someone is having the speed issue run a trace route from their workstation to see which WAN it goes out.

SoCalRacer · ‎04-24-2020

I have not seen this issue. Possibly someone in the press box broke it on accident? I would maybe look at when it was found and when it was known to be in place. Check the logs to see who might have been connected to the AP during that time. I would say if it keeps happening you might need to look into it further.

SoCalRacer · ‎04-24-2020

You might start with a packet capture when you know they are playing the games, Then check for DNS requests and then block those, that will most likely cause the game to not load.

SoCalRacer · ‎04-24-2020

It is a bit odd to block Client VPN connections by IP, can you explain the reason?

SoCalRacer · ‎04-24-2020

You may look into JumpCloud also

SoCalRacer · ‎04-24-2020

Isn't all Meraki Client VPN PAP?

SoCalRacer · ‎04-23-2020

I don't exactly, but I would guess 1 minute would be the lowest. I would start at 60 mins, then 30,15,5,1, etc. until you find the limit.

SoCalRacer · ‎04-23-2020

My recommendations: 1- Use a PoE+ switch to provide the power (many benefits like disabling the port to power cycle) 2- Use the injector MA-INJ-4-UK (This will enable you to position the AP farther from the power source, possibly ceiling) 3- User AC adapter (This is usually temporary and lacks scalability)

SoCalRacer

Community Record

Badges