About KarstenI

CharlieCrackle

Customers are loving this feature My wish came true

MK2

I'll do 🤣 hopefully I will get rid of them all.

BlakeRichardson

Agree with @KarstenI we are using Meraki with Radius and it doesn't require a certificate. The client device will need to accept the radius servers cert though.

PhilipDAth

I had to actually decommission IPv6 in some customer networks where we had already deployed it just to install Meraki. Horrible experience having to go backwards,

KarstenI

Duplicate post, Discussion started here: https://community.meraki.com/t5/Security-SD-WAN/Upload-SSL-Certificate-in-Meraki-MX-Appliance/m-p/134479

cmr

@jashcraft that looks like a realtek card, try the Lenovo 2023... drivers referenced in the thread about E480s

LeonValleyTX

Ok to be clear, What exactly do I plug in where and bring up on a browser to setup the Public IP? I connected a network cable on my network last night and came in and it had handed out a bunch of IP address so I had to unplug it in a hurry. I'm a dork.

KarstenI

It is not really disabled, but overwritten with the login from the network-config: https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page#Changing_Log-In_Credentials

redsector

I buy WiFi 6 accesspoints like MR46 (not only for multigig, they have more advantages than this) and have still MS225 switches. I have a look on the network ports if the 1Gig line is enough. Most of the accesspoints don´t need more than 1Gig. In case the uplink to the accesspoint need more than 1Gig I will replace the switch in future.

ShubhamPatki

Hello Karstenl, Thanks for the info. I got in touch with the support and they are saying that the only workaround to achieve this without disturbing the template is to use their backdoor help. They have the ability to mark individual networks/switches to the desired version apart from the template. We will be going by that route I guess. As splitting the template for individual network kind of creates extra unnecessary confusion and complexion I think. Thanks for your thought though. It was very helpful.

CptnCrnch

I guess they've dropped it because of its implications (performance impact as well as functionality issues) in favor of Umbrella. At least that'd make perfect sense.

MilesMeraki

Cisco Duo will enable the configuration of 2FA for Meraki MX client VPN. It's not supported by default, unfortunately. Heres's the DUO configurationdocument - https://duo.com/docs/meraki-radius

Fabian1

Oh my... Yes, the checkbox was missing. Now I can see the logs of the firewall rules. Thanks a lot!

TBHPTL

What is the behavior you desire? You can easily tunnel one or all SSIDS in Org B back to the MX in Org A the Chromecasts must be in the same VLAN as the client trying to cast. you can enable bonjour between the differing subnets under the MX firewall.. Create a rule with the service VLAN(s) of the Chromecasts to the Client VLAN(s) for all services then create reciprocal rule.. like this:

nealgs

we do it the same way as @PhilipDAth mentions. We have a standard fibre BB connection from BT (we are in the UK) that we use to connect our test kit to meaning we can test them out before sending/deploying to site. cheap solution 🙂

GiacomoS

Hey @Joe360 , As I mentioned previously there needs to be a certification process before anything actually changes. These can take some time to happen, especially since the UNII-3 band is not widely available in Europe yet (or to be precise, it is still dedicated to just SRDs). The feature requests would not normally get a response, as it is a way for our product development team to collect your feedback and prioritise new features and products accordingly. I'd recommend to keep on leveraging it, including the context of why you think this would be beneficial for your company and/or customers, so a strong case can be built. Hope this helps! Giac

Johnmccsi

I'm thinking something had to change with Meraki, Being redirected to the splash page was working just fine until a week or so ago. Now all of a sudden after the timer I as well stopped getting the redirect. Have to disconnect the wifi and reconnect, and manually open a browser and go to nasa.gov to be redirected.

redsector

We are running a Cisco Classic network with Cisco Catalyst switches. They are running with PVST. But we connected Meraki-Switches without any issues. You need to have VLAN1 as standard VLAN. And don´t connect Cisco classic, Meraki, and again Cisco Classic in a row. In the end our core and some distri-switches are Cisco classic and userswitches are Meraki. https://documentation.meraki.com/MS/Deployment_Guides/Advanced_MS_Setup_Guide

alex-dna-tech

syslog-ng.conf @version: 3.9 source s_network { syslog(ip("0.0.0.0") port(5514) transport("udp") flags(no-parse)); }; destination d_local { file("/var/log/messages"); }; log { source(s_network); destination(d_local); }; "flags(no-parse)" works for me Maybe the message can be parsed by a template. Inspired by Syslog-NG documentation

KarstenI

Meraki Support can enable a beta feature named " custom layer 3 inbound firewall rules " where you have more flexibility in controlling the inbound way similar to what is available now for outbound rules. Perhaps this feature is of benefit for you.

cmr

To be fair I haven't tested it myself so you may well have a point there!

John-K

We'd use CY for public-facing announcements. XD

KarstenI

802.11ax is the standard (well, technically the amendment, but that is not important here). The WiFi-Alliance runs the certification program for the devices: https://www.wi-fi.org/discover-wi-fi/wi-fi-certified-6

Inderdeep

@Jonasy : You can change your rules https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings

TinyLittleAdmin

Thank you guys! Nice weekend 🙂

KarstenI

Karsten Iwen

Community Record

Badges