Meraki

KarstenI · ‎Oct 6 2023

Well, than it has to be likely a different firewall. Or a dirty hack. Two (or three) MX450 (likely HA pairs) in different Dashboard networks and a central switch load sharing the traffic to these firewalls. Sadly this completely breaks the visibility in the dashboard.

KarstenI · ‎Oct 6 2023

If you are now at 2*1Gig, How soon will you crush the 4 to 6 GBit of an MX450? I would assume that no one will notice. And I have multiple customers running an MX84 on a Gig Link. For sure they don't get the linseed, but typically they don't even realize that the firewall is the limiting factor.

KarstenI · ‎Oct 6 2023

Not official, but it is nearly always restricted resources and increased effort to implement new features on an old limited platform. And of course the hope that customers move to the newer platforms with new features.

KarstenI · ‎Oct 6 2023

Same for MX64.

KarstenI · ‎Oct 6 2023

👍

KarstenI · ‎Oct 6 2023

Do both of your MX68 have a public IP? I've seen ISPs where the first device got the public IP from a /30 but the second only a private IP from a DHCP pool. This could break VPN connectivity. And are you talking about AutoVPN or a manual IPsec config?

KarstenI · ‎Oct 6 2023

Yep, looks good! Thank you @AmyReyes.

KarstenI · ‎Oct 5 2023

30.5, but I also just saw this on other non-beta networks. "Enabled" and "Broadcasting" is always "Yes".

KarstenI · ‎Oct 5 2023

@DarrenOC started with personal failures. I also have to contribute two of mine (although there are more): A long time ago wanted to migrate the single drive Novell Netware server to a RAID system. In the middle of the process I realized that I mirrored the new and empty disk onto the production disk. Luckily the backup was up to date and the restore went as expected. A new customer where I was looking for a place for the new firewall in the crowded rack. I touched a very tight ethernet cable and suddenly the noise in the rack got reduced. What I didn't see was that the cable was crossing the power-switch of the multi-outlet power strip on the other side of the rack. And this power strip connected both controllers of the SAN.

KarstenI · ‎Oct 5 2023

@TMRoberts Not a store, but there are fan articles: https://ciscomeraki.influitive.com.

KarstenI · ‎Oct 5 2023

My story, which happened already about 25 years ago, is a little bit similar to the one from @BlakeRichardson: On two different occasions the customers complained about a strange smell in the office. Well, the first time it was a dead mouse inside the desktop PC, the second time a dead mouse in the bottom pontoon. While the PC was cleaned, they decided to fill the bottom pontoon with construction foam without getting the dead mous out of it ... Sadly (or luckily?) it was not common those days to carry a camara with you all the time.

KarstenI · ‎Oct 5 2023

Is it only in my installations or is that "normal" for the BSSID details? This is my CW9166: The SSIDs I-HomeX and I-HomeS are both disabled for 2.4 in the RF-Profile and they also don't broadcast. I-IoT is enabled for 2.4 and 5 but not for 6. The output is completely wrong.

KarstenI · ‎Oct 5 2023

I am with you, but sometimes the harsh truth has to be spoken ...

KarstenI · ‎Oct 4 2023

It's also documented: https://documentation.meraki.com/MS/Monitoring_and_Reporting/Packet_Captures_and_Port_Mirroring_on_the_MS_Switch

KarstenI · ‎Oct 4 2023

Technically you are doing nothing wrong. It works as expected that the system on the destination port doesn't have network connectivity. On Catalyst this can be achieved, but not on MS. You need to access the device on a second NIC.

KarstenI · ‎Oct 4 2023

With 20+ sites I would always put an additional MX-Pair as a concentrator into the DC and use AutoVPN. It will make everything so much easier. Otherwise, I would go with the "one peer" approach. Although using wildcard PSK is not a best practice, the main problem with them is the logistics problem when the PSK is compromized. But this is not the case with the cloud based config where the PSK can be easily changed for many devices simultaneously.

KarstenI · ‎Oct 3 2023

Voice? Only use the integrated Wireless if you don't need another AP. There is no fast roaming between the integrated WLAN and "real" APs.

KarstenI · ‎Oct 3 2023

I have never seen anything other than the info on the wireless config page. Best to use a system with a WLAN-Scanner on site.

KarstenI · ‎Sep 28 2023

Are you talking about Systems Manager?

KarstenI · ‎Sep 27 2023

This is what I always think about in situations like these: There may have been a well-thought-out design for your WLAN. Adding a new wireless router will change a lot. As @BlakeRichardson says, you better get someone with wireless expertise to help you.

KarstenI · ‎Sep 27 2023

Yes, that is right; I needed to be more specific. I was only referring to the original problem for features of the AP. The 9k switches (at least all that I know) with UPoE also provide 3bt, which is enough to run the 9164 with all features, including the USB port.

KarstenI · ‎Sep 27 2023

I think there gets a little bit mixed up here: UPoE is 802.3bt; this is only needed for the USB port on the AP. PoE+ is 802.3at and is enough for all radio features on the 9164

KarstenI · ‎Sep 27 2023

I'd prefer a dedicated MT gateway over ethernet on the sensors. Pulling cables to the doors can't be the solution ... 😉

KarstenI · ‎Sep 27 2023

What a waste of resources... 😉 But yes, I just disabled my cameras and disabled all SSIDs and the MT20 sensor still reports open/closed events.

KarstenI · ‎Sep 26 2023

Can you be a little bit more specific?

About KarstenI

KarstenI

Karsten Iwen

Community Record

Badges