Meraki

BlakeRichardson · ‎Feb 12 2018

Policy changes are only applied when a session is being established. They don't get applied during an existing session. I don't think there is any way to clear an AD authenticated person. I guess I am not going with Meraki for gateways then, We rely on AD and not being able to terminate a users session is nuts, every other vendor I've worked with over the years can do this. @PhilipDAth by "session" I am assuming you mean the session between client and website i.e web session not the user session. If so restarting the client and waiting 5 mins should break this session however changes still don't work. Thanks for your help

BlakeRichardson · ‎Feb 11 2018

@PhilipDAth Network traffic is flowing fine but when I ping the switches management interface I get no response.

BlakeRichardson · ‎Feb 11 2018

I am playing around with a MX unit as a potential replacement for a Sonicwall 9200. AD authentication is currently used and I would like to stay with that. I am finding the splash page coming up for new users is hit and miss but also when making changes to policies they don't seem to take affect if the person is already logged in, I am trying to block and unblock Facebook using multiple policies one of which is on a schedule however it doesn't work. Even blocking and unblocking a simple site doesn't work. Long story short I would like to kill the users login session but cannot find any way of doing this without rebooting the MX appliance. Is this possible?

BlakeRichardson · ‎Feb 11 2018

Hmm, ok just some more information switch IP's are all statically assigned and even if they weren't the gateway isn't running a DHCP server. Switches are on firmware 9.32 I do have to unplug the backup unit and swap back over to our primary hardware this afternoon so if I remember I might make a screen cast not that it will be of much use.

BlakeRichardson · ‎Feb 11 2018

The MS unit are all on a pretty flat L2 network. @PhilipDAth yes the problem is related to the internet, our gateway had an issue this morning, I pulled the plug to reboot it and our monitoring software (PRTG and Intermapper) both complained that the units were offline even though the Cisco SB series we have were all still online. L2 traffic still seems to flow. Everything is communicating via VLAN 1 so there is no L3 routing involved. Its a pretty simple network at the moment. @MilesMeraki Its not a LAN issue as only affecting the MS switches which includes is MS-425/32 which is our core switch.

BlakeRichardson · ‎Feb 11 2018

I've had a few internet issues at the office this morning and every time the internet has gone offline and the MS units lose connection to the cloud they stop responding to PING's. The switches IP's are all statically set so it makes no sense why this should happen. Any ideas?

BlakeRichardson · ‎Feb 8 2018

Agreed, we live in an age where network security requirements are increasing every day yet this "default" seems silly if I'm honest. I would rather no default SSID. Also if you were doing a full rebuild of a wireless deployment you would possible want to be able to delete every SSID so you can start from scratch. This should be simple to implement so @meraki_ team how do we push to make this happen, a security flaw like this shouldn't require as all having to make a wish.

BlakeRichardson · ‎Feb 8 2018

I've had a look but i cannot find any settings for this so thought I would ask. Is it possible to disable user accounts from using screen lock on a device running Mac OS. I want to avoid users using a shared device and putting the machine to sleep without logging out which stop the next person from using the device as they cannot unlock it. It requires the user to power down the device which I would rather avoid.

BlakeRichardson · ‎Feb 7 2018

As @PhilipDAth mentioned the management port is for the initial setup of a device and is there as a fail safe in case you do something silly and cannot access your device using its normal ports.

BlakeRichardson · ‎Feb 6 2018

Awesome glad its resolved!

BlakeRichardson · ‎Feb 6 2018

Correct me if I am wrong but the process is simply exporting the request out of Meraki by downloading a file and then importing that into Apples system without any copying and pasting?? If thats the case I would contact support and open a case, its been a long time since I did this but I don't recall it being difficult. Try this site, it my give you some info and you might be able to find where you are going wrong. https://documentation.meraki.com/SM/Device_Enrollment/Apple_MDM_Push_Certificate

BlakeRichardson · ‎Feb 6 2018

Actually if its a licensing issue are you app's setup like the below screenshot and have you set your devices to be supervised?

BlakeRichardson · ‎Feb 6 2018

Are you getting an error message when the sync fails?

BlakeRichardson · ‎Feb 6 2018

Now I have an email saying the case is closed and no further action is required, now I have no idea if a replacement is actually being sent or not..... Come on Cisco if this is a serious issue why am I having to read between the lines to work out whats going on??

BlakeRichardson · ‎Feb 6 2018

@MRCUR I have identified the unit by looking through the logs. So I know which unit I am replacing now. @PhilipDAth The email did mention the network but not the org, I guess with some unique naming convention this would help.

BlakeRichardson · ‎Feb 6 2018

So I received a nice email this morning saying one of our MS225 units has a potential fan failure and has show critical temperature alerts and to claim a replacement. This is nice thats its automated but it doesn't actually give me the serial number of the affected device and given we have a few of these I guess I am going to have to try and work this out using the log files. I would have thought this simple piece of information would have been included.

BlakeRichardson · ‎Feb 4 2018

Im guessing based on wording from the OP that the previous employee did this without permission and its going to be tricky to get this resolved. Good luck to you. @MerakiDave just out of interest say the AP was originally claimed on the OP's Org and the employee unclaimed it and moved it to his own org can the OP make a case that he legally purchased the AP and has possession of it therefore it be moved back to Org or does this still require lawyers?

BlakeRichardson · ‎Feb 4 2018

You mention that is doesn't have the Meraki client installed but has it ever had the client installed? Maybe it wasn't removed properly if it was previously installed.

BlakeRichardson · ‎Feb 4 2018

Yes Rackstuds!!!! These are the only fixture allowed in my department, no more sore fingers and trying to balance expensive equipment while you get it mounted. Some good kiwi design right here!!!

BlakeRichardson · ‎Feb 1 2018

Thanks, seems odd, even if I was a SMB customer with only 20 users and no AD having to set passwords manually would be a pain.

BlakeRichardson · ‎Jan 31 2018

Just a very quick question, can user passwords be easily imported into systems manager when you are importing new owners or do I manually need to specify these?

BlakeRichardson · ‎Jan 31 2018

While this idea does sound amazing it also gives me cold sweats and I find in my field 80% of users have no clue how to install software and getting them to navigate something that we think looks simple is a mine field for them. I guess I am stuck to spoon feeding users with their setups 😞

BlakeRichardson · ‎Jan 29 2018

I just came across this and saw that the question about Meraki Masters was not answered, why is someone who has sat the CMNO course not have access to the Masters course. I would evening be willing to pay for it as I have the rest of the certifications I have. It seems bizarre we cannot get full product training, the people are asking but it doesn't sound like we are being heard, a lot of the members here are customers!

BlakeRichardson · ‎Jan 28 2018

Personally I don't think SM it quite ready for Deployment of Macs, it's close but as far as configuring the machine for full use it can't do it. Before a user even touches the machine we make a bunch of configuration changes most of which are pre set as part of the image which is installed via deploy studio. If we relied in the OS that shipped with the machine and SM there would be a lot of manual configuration to be done. User accounts, LDAP integration, Adobe CC install and registration. Database launchers and other various shortcuts and files added to the users desktop.

BlakeRichardson · ‎Jan 28 2018

Hmm this would be interesting, App's would have to be added so that by default they are not installed on any device otherwise you might end up with users getting app's they don't need or want. It is a good idea though, I like it!

About BlakeRichardson

BlakeRichardson

Community Record

Badges