Meraki

SoCalRacer · ‎Aug 12 2020

Those are static overrides like on a client computer. Depending there the client is getting DHCP from then that will determine the DNS server used, otherwise fall back to static assignment

SoCalRacer · ‎Aug 5 2020

I would try a couple things 1) DHCP reservation 2) Turn on LAN access in the firewall rules of the SSID 3) Turn on Bonjour/mDNS forwarding 4) Setup a test/temp SSID just for connecting your phone/home device to help you rule out issues.

SoCalRacer · ‎Jul 2 2020

The link was broken https://documentation.meraki.com/MG/MG21%2F%2F21E_Datasheet I have not done an MG21 in Ireland with Vodafone, but here is what I would offer a some steps to try. 1) Verify the SIM is active and works in another device (Mobile phone, another Meraki device, or USB modem) 2) Make sure you can get signal on a mobile phone on Vodafone where the MG is deployed 3) Verify if there is any special APN settings needed for the carrier ( I know Verizon static IP is this way in the US) 4) Verify the MG has connected to the Meraki cloud and got a firmware update (May need to be wired to do this) 5) Check the local status page of the MG and see if you are getting signal, if not its a signal issue, if so config issue.

SoCalRacer · ‎Jun 9 2020

Then yes the the DS is the one you want.

SoCalRacer · ‎Jun 9 2020

I would go with the DS then. I thought you mentioned you were already using these Skyus modems and you wanted to use something different.

SoCalRacer · ‎Jun 9 2020

Then I would go over this document carefully. Verizon seems to be a bit of a pain with a USB modem in Meraki. https://documentation.meraki.com/MX/Cellular/3G%2F%2F4G_Cellular_Failover_with_USB_Modems. Also note the USBID, if that isn't exact then you will have issues.

SoCalRacer · ‎Jun 9 2020

It depends on the Carrier, but we have used multiple carrier sims in this one. https://www.amazon.com/gp/product/B01M0JY15V/ref=ppx_yo_dt_b_asin_title_o00_s00?ie=UTF8&psc=1 It is a little expensive now $90, when we bought them over a a year ago they were $25 https://camelcamelcamel.com/product/B01M0JY15V Personally I would recommend staying away from usb modem, they are finicky and we only use them in temporary workaround situations. My Recommendations: 1) MG21 2) MX67C or something with an internal sim 3) Cradlepoint or other vendor using sim to ethernet 4) USB modem

SoCalRacer · ‎May 28 2020

There isn't any easy way. Just lessons learned. Screenshot everything on the Sonicwall. Backup config and firmware. Setup MX as best as possible before WAN switch over. Setup S2S VPN if needed. Setup VPN profile on clients if needed. Then cut over. Leave the Sonicwall up perferrably in a DMZ or Vlan or not even physically connected to the same network. That way any gotchas you can get in and check the exact settings and config.

SoCalRacer · ‎May 5 2020

Try adding "visible" = "true", "availableOnAllAps" = "false",

SoCalRacer · ‎Apr 24 2020

I would contact support to have them help review your settings before doing it. There could be some gotchas but your org isn't super flat/simple so I would always recommend a second set of eyes

SoCalRacer · ‎Apr 24 2020

You can move it. I would say possibly the recommendation was made because there was another security device in the main network. You can only have one primary MX in each network.

SoCalRacer · ‎Apr 23 2020

You might check this setting on the VPN profile on the Mac to disconnect.

SoCalRacer · ‎Apr 6 2020

Meraki socks FTW!

SoCalRacer · ‎Jan 13 2020

Not sure exactly how you are using this, but usually your can schedule a WOL from a server or from the endpoint via Powershell or something you are comfortable with.

SoCalRacer · ‎Jan 10 2020

Have you read through these docs? https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Settings#OSPF_route_advertisement https://documentation.meraki.com/MX/Site-to-site_VPN/Using_OSPF_to_Advertise_Remote_VPN_Subnets

SoCalRacer · ‎Jan 9 2020

I don't believe it is possible with SM. I do believe you can use many of the third-party apps that will allow remote view, but not control.

SoCalRacer · ‎Jan 9 2020

Can you point me to where you have read that it has to use Meraki's NTP? Anything with DHCP you should be able to point to your internal NTP. This doc doesn't list a Meraki IP, just any destination with port 123 UDP traffic, so I am a bit confused. https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Upstream_Firewall_Rules_for_Cloud_Connectivity

SoCalRacer · ‎Jan 8 2020

You can't combine and route all traffic out a virtual WAN (2 Physical WANs). You could have both of them active. Send certain traffic out one WAN and other traffic out the other. You would have no redundancy, but depends on the needs. Sometimes you see this with VOIP out WAN2 and Everything else out WAN1 https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences

SoCalRacer · ‎Jan 8 2020

Work on new certs Try to make Cisco/Meraki event (ECMS or CLUS) Work deeper and wider in the Meraki product lines

SoCalRacer · ‎Jan 8 2020

Reset IP stack are you meaning (netsh int ip reset?) Did you reboot after that? Also check Xbox Live Networking Service is off. Try using rasphone.exe (Windows Built-In) when testing. There are a bunch of things it could be or things to try to help narrow the issue. My thought is if it works on a different Windows 10 device wired/wireless on a different network and it works on wireless on this laptop, then maybe it is a wired network issue and not a Client VPN issue. Can you check settings on the working wired network vs not working one?

SoCalRacer · ‎Jan 7 2020

My recommendation is RMA the licenses. In the long run it will be cleaner to have the order and dates match when they were deployed. The other option is you could move the remaining to a different network/org. That may require support, but really isn't ideal.

SoCalRacer · ‎Jan 7 2020

My thought was he wanted to use the device in a home lab or personal use, not sure what the intent is.

SoCalRacer · ‎Jan 7 2020

I would say Root Guard STP setting on the port the WAP is plugged into. Good thread to read over STP guard setup - best practices

SoCalRacer · ‎Jan 7 2020

Depends on you topology. If you have a single switch then I would say no. If you have more than one switch, can you share how the network is connected?

SoCalRacer · ‎Jan 7 2020

Most likely the license expired (1 year) and needs to be renewed. In that case you need to contact sales/partner/account rep. Another option is contact support and they can help provide some options. You may be able to claim the hardware and add to your org, then have them put a 30 day grace license on it, while you get the normal license renewed.

About SoCalRacer

SoCalRacer

Community Record

Badges