Meraki

KarstenI · ‎Nov 16 2022

May I present, the most beautiful doorstop in the world: Recycled when upgraded to a Z3. (Oh, I just imagine that my door is quite dirty. I'll directly go and clean it.)

KarstenI · ‎Nov 7 2022

Hi, there is something wrong with the URL, some characters too much at the beginning.

KarstenI · ‎Nov 2 2022

Congratulations to all, well done and keep going! 👏👍

KarstenI · ‎Oct 21 2022

If you just bought new gear, you need to use the option "License more device". And if you put in your order code that you got by mail, the devices and associated licenses are added simultaneously. https://documentation.meraki.com/General_Administration/Licensing/Meraki_Licensing

KarstenI · ‎Oct 20 2022

You can filter on VPN users.

KarstenI · ‎Oct 20 2022

They show up under Network Wide -> Clients with some information. But it takes some time. It's far away from being real-time.

KarstenI · ‎Oct 20 2022

I assume it was a pure business decision not to implement fixups like how they are available for example on the ASA. And yes, I also have customers still using FTP. But many of them moved to other protocols when migrating the firewalls to Meraki MX. Most of them now use file shares based on HTTPS (like https://www.directorylister.com), some moved to Cerberus (https://www.cerberusftp.com). But these were always servers hosted by the customers. When being a client, they just used client apps that supported passive mode.

KarstenI · ‎Oct 20 2022

There is no "NAT Fixup" on the MX. You need to change to either passive mode or a different protocol. Using plain FTP is a little bit like the 80th. Yes, the music was better, but not the typically used protocols.

KarstenI · ‎Oct 19 2022

Are all your APs on channel 44? Why? With these other devices nearby and with Ch44 being also used by AWDL, I would move my APs to other channels.

KarstenI · ‎Oct 7 2022

This is best done on the server itself with the tools of the OS. And you can put your PC into the 3cx VLAN and do a port-scan.

KarstenI · ‎Oct 1 2022

Yes, it will save the power. This is my power meter for my server and Lab-Switch. The spike is caused by powering up five APs and an IP-phone which pushes the consumption from 112W to 162W: Before After SW-Lab-c3560cx#show power inline Available:240.0(w) Used:127.1(w) Remaining:112.9(w) Interface Admin Oper Power Device Class Max (Watts) --------- ------ ---------- ------- ------------------- ----- ---- Gi0/1 auto on 29.9 AIR-AP3802I-E-K9 4 30.0 Gi0/2 auto off 0.0 n/a n/a 30.0 Gi0/3 auto on 26.6 AIR-AP2802I-E-K9 4 30.0 Gi0/4 auto on 15.4 AIR-CAP1702I-E-K9 4 30.0 Gi0/5 auto on 26.6 AIR-AP2802I-E-K9 4 30.0 Gi0/6 auto on 16.8 AIR-AP2702I-UXK9 4 30.0 Gi0/7 auto off 0.0 n/a n/a 30.0 Gi0/8 auto on 11.8 IP Phone 9971 4 30.0

KarstenI · ‎Oct 1 2022

We do that on a couple of sites and it works as expected. The only drawback is that the dashboard still reports the APs as "failed" although the dashboard could know that it is just based on the port-schedule. But improving this would likely be a feature request. My next plan ist to test putting the APs into deep sleep mode via the API at night: https://documentation.meraki.com/MR/Radio_Settings/MR_Radio_Turned_Off_(Deep_Sleep)

KarstenI · ‎Sep 29 2022

Hamina Wireless is the new star in the Wireless Design area: https://www.hamina.com/ But it is still in Beta and not publicly available.

KarstenI · ‎Sep 26 2022

No, but the deployments where we removed the MR46 and replaced them with MR44 had a quite good coverage previously. And there no difference was seen.

KarstenI · ‎Sep 26 2022

We switched quickly from MR46 to MR44 when they came available and in Real Life (tm) didn't see any relevant differences.

KarstenI · ‎Sep 23 2022

What is AnyConnect listing in its Message History?

KarstenI · ‎Sep 21 2022

Adding to what @DarrenOC said, if the move needs to be done from one dashboard network to a new one, cloning the old network can speed this process up. For the backup, no, sadly there is not backup in the dashboard. But third party solutions are available like the one from @PhilipDAth https://www.ifm.net.nz/cookbooks/meraki-backup.html

KarstenI · ‎Sep 21 2022

Yes, @CptnCrnch these were some hard days. And we also still needed Flash ... I nominate Peter Palúch from the Cisco Community who regularly inspired me to go deeper with certain topics than needed to accomplish a given task.

KarstenI · ‎Sep 20 2022

Same here with my MG41E, but I never considered it a problem ... 😉

KarstenI · ‎Sep 19 2022

This one is great for Windows users!

KarstenI · ‎Sep 19 2022

"microsoft.com" is not enough to exclude from the tunnel. Here is a Cisco Tech-Note on the needed exclusions: https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215343-optimize-anyconnect-split-tunnel-for-off.html

KarstenI · ‎Sep 15 2022

You need to terminate the IPsec VPN on a different device as there is no routing between manual IPsec VPNs and AutoVPN. Regardless how great and powerful AutoVPN is, for manual VPNs the MX is just not usable.

KarstenI · ‎Sep 12 2022

Make it to #1? Mission impossible … 😉

KarstenI · ‎Sep 9 2022

You can move your management-traffic to an alternate Management-VLAN and let the guest traffic flow native. On the switch port the native traffic gets tagged as needed: https://documentation.meraki.com/MR/Other_Topics/Alternate_Management_Interface_on_MR_Devices Only downside is that Dashboard-traffic is still mixed with guest-traffic.

KarstenI · ‎Sep 9 2022

Congratulation, and it only took little less than half a year ... 😉

About KarstenI

KarstenI

Karsten Iwen

Community Record

Badges