Meraki

Dunky · ‎May 19 2022

Find out why the internet is not reachable over that link. Is the MX port up? Is the router/modem up? is the WAN side of the router/modem up? Is there anything in the Event Log? Just standard troubleshooting really. Sorry cant be of much more help than that.

KarstenI · ‎Apr 29 2022

I also used 10gtek for quite some time. But they converted one of my MS120-8FP into a fixed 10Port copper switch … Now I don’t buy them any more.

qxain123 · ‎Apr 24 2022

For setting up S2S VPN , we can assign any available IP address in the ISP block allotted to the MX right ?

DeanCTS · ‎Apr 19 2022

And remember guys, the more badges you have the better person you are!

MerryAki · ‎Apr 8 2022

This is my logger config in the meraki dashboard:

GuyEP · ‎Jul 6 2021

I just ran into this today on two new machines. I was seeing a 403 Forbidden error in Console when OS X was trying to request the provisioning profile during installation; then I'd get an ErrorCode:1 in the UI. I tried requesting the URL that appeared in the logs and ended up getting the log-in page for the self-service portal. On a whim, I tried enabling authentication for enrollment (which, oddly enough, defaults to disabled on a fresh SM setup). You can find the setting under Systems Manager -> Configure -> General ("/manage/configure/system_settings") in your dashboard. After I did that, I tried downloading the enrollment profile again, got prompted for Meraki dashboard credentials, provided them, and then the profile that I downloaded installed fine. Before trying the new MDM profile file, I tried the one I had downloaded from before I enabled authentication and it failed, but the one I downloaded after authenticating succeeded. I'm wondering if maybe SM has a bug where if you do not have authentication enabled when you download the MDM profile, it fails to authenticate properly. Perhaps the profile has a stale set of authentication credentials (resulting in the 403) but if you download one after authenticating it has refreshed credentials? Or something like that. Just conjecture; all I know is that things worked when I enabled authentication for enrollment.

ObaidN · ‎Apr 19 2021

Thank you @Bruce . Yes I am aware that I would only be able to use 1x ISP as active.

jpcaid · ‎Mar 4 2021

Hi Rafael How did you fix this in the end? i read about dreytek vpn client can fix the constant disconnect.

CharlesIsWorkin · ‎Mar 3 2021

@SoCalRacer @ToryDavenport Hey, did you guys ever answer the part about SIP ALG? It looks like the MX won't use ALG at all according to this link. VoIP on Cisco Meraki: F.A.Q. and Troubleshooting Tips - Cisco Meraki Also, how could you used DSCP 48 in the traffic shaping instead of 43 EF, which is there by default.

SoCalRacer · ‎Sep 4 2020

I believe this should help disable local status page https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page#Disabling_the_Local_Status_Page

Claes_Karlsson · ‎Sep 2 2020

That sounds bad, really good testing and you should absolutely push your testing and findings to the Meraki team! Good job!

PhilipDAth · ‎Aug 31 2020

If they are running Windows 10 Google "NRPT". It lets you configure a name resolution policy. You can say for the domain company.local send all the queries to my internal AD servers. https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn593632(v=ws.11)#:~:text=The%20NRPT%20is%20a%20table,Policy%2C%20or%20with%20Windows%20PowerShell.

John_on_API · ‎Aug 31 2020

Similarly, https://developer.cisco.com/meraki/api-v1/#!get-organization-appliance-security-intrusion will return an error if the organization does not have an advanced security license, like this: { "errors": [ "This endpoint requires an advanced security license" ] }

Retlaw · ‎Aug 29 2020

Thanks BrechtSchamp. Enjoyed it. More would be welcome 🙂

NC_Chris · ‎Aug 27 2020

I may have done the others as it checked in without paying attention maybe. Just happened to notice it yesterday with a Z3 and today with an MX84.

Shadius · ‎Aug 26 2020

I was able to figure it out! I used the local status page and statically assigned an IP address. I got the switch from Meraki. Thanks!

meraclimes · ‎Aug 19 2020

Thanks for the quick response, I tried the Security & SD WAN Tab yesterday, with no results. But today I went to Layer 7 Firewall Rule and deleted all the rules - and it helped. Thank you very much!

awd2010 · ‎Aug 14 2020

SOLUTION: We received the MG21 WW model and started to see signal strength, but were stuck in the Registered connection type. After changing the APN from the default live.vodafone.com to hs.vodafone.ie we connected the MG21 to the Vodapfone IE network.

rhbirkelund · ‎Aug 12 2020

I tend to see "DNS is misconfigured" even while the configuration is verified, and correct. Often, it's due to some sort of caching going on, so I'd wait a couple of hours and see if it goes away on it's own.

cmr · ‎Aug 12 2020

@ToryDavIF the MXs are using the ISP DNS and are fine, why not just use the ISP DNS for the switches as well?

PhotoJoseph · ‎Aug 6 2020

Thanks for these tips. Before I tried these, the suggestion to disable "Deny Local LAN" came up and that turned out to be the easy solution. But Bonjour forwarding also sounds like something I want (this is an all Mac house), and ahh I see your suggestion of turning on LAN access is the same thing from the other. Perfect, thank you so much!

NinHo · ‎Jul 16 2020

we had the same issue with just Verizon. had to upgrade to 14.53 firmware and enter the correct APN on the dashboard.

SCC · ‎Jul 2 2020

Well, i am not saying the device was extremely hot. But to me it does not look normal. Therefore, I kept 1RU space between switches and MX84 and also made sure that there is a proper air flow in the rack.

SoCalRacer · ‎Jun 9 2020

Then yes the the DS is the one you want.

MFIT · ‎Jun 8 2020

Re-entering the pre-shared key did it for me!! Thanks

About SoCalRacer

SoCalRacer

Community Record

Badges