Meraki

BlakeRichardson

How many client devices is the MX supporting, it sounds like it's being over utilised. Do you have any site to site or client VPN connections?

BlakeRichardson

😂When it rains it pours ( notifications that is), I have the same issue My other issue is the MV flagging motion outside of my area of interest which on a busy street makes reviewing footage slow as everything is captured.

BlakeRichardson

Like the idea but for me the data on this page doesn't match data on other pages.

BlakeRichardson

As long as your client devices and switches all have unique IP addresses you should be OK.

BlakeRichardson

Well done everyone and @cmr top effort, you have been busy!

BlakeRichardson

@techfldusd You are better to be blocking applications on a firewall rather than on the access points themselves.

BlakeRichardson

You could look at having cages installed around the cameras although this could affect the view.

BlakeRichardson

I don't believe Meraki officially offers replacement parts. If the camera has an issue contact support and arrange an RMA. If the camera has been damaged then you are most likely on your own.

BlakeRichardson

Is it just the link going down or the whole switch? Make port scheduling isn't enabled on the port.

BlakeRichardson

Ideally you should be managing Apple devices via an MDM, with managed devices you can disable Private MAC. If the devices are BYOD of some description the only resolution is make sure the class of network you have chosen can handle the amount of devices. https://support.apple.com/en-nz/102509

BlakeRichardson

What is your wifi coverage like and what method of authentication are they using?

BlakeRichardson

Well done everyone. Nice work as always! I had to laugh this banner make it looks like the winners are retirees

BlakeRichardson

If you have a Apple USB ethernet adaptor plus a Apple lightning to camera adaptor you can make a makeshift ethernet adaptor

BlakeRichardson

If you use a print server your clients communicate with the print server and not the printers directly. The print server passes any jobs onto the appropriate printer, this is a much more secure option and like @Brash this is what I use.

BlakeRichardson

I would create a firewall rule that only allows the clients to access the printer/s that are needed and I would lock the rule down to use whichever protocol you use for printing. If you want to ensure things are secure make sure you enable IP filtering on the printers themselves.

BlakeRichardson

Have you read this documentation as there are variables. https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Clients_Usage_Page_Overview#:~:text=Clients%20list%20data%20is%20aggregated,automatically%20refreshed%20every%20few%20minutes.

BlakeRichardson

Hmmm I don't recall seeing this being a reoccurring issue. Have you tried an RMA to see if that resolves the problem for you. Usually with large scale issues a replacement program is launched and affected devices replaced.

BlakeRichardson

If you can acquire the correct hardware and have the time and patience to work this out yourself it would be a nice challenge. If you don't have the time I would suggest consulting a professional preferably someone that has offices in both locations.

BlakeRichardson

I think it might be side by side, I've seen devices have two different applications for Meraki systems manager in Control panel > Programs & features. Support would be able to confirm for sure.

BlakeRichardson

This banned has been showing in my dashboard for some time. 3.0.2 is quite old and my guess is it's stuck with no upgrade path. Can you manually upgrade it? What operating system versions will be supported by the updated versions of the agent? Windows agent versions 3.5.x - 3.7.x are supported on all versions of Windows 10+ and Windows 11+ 4.0 is supported on Windows 10 21H1+ and Windows 11+

BlakeRichardson

Configuring Clients for 802.1X and Meraki Authentication https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_Clients_for_802.1X_and_Meraki_Authentication Chrome OS Click the Search button and type Network Under the Network section, click Wi-Fi Search and click the appropriate SSID Select PEAP as the EAP method Choose MSCHAPV2 from EAP Phase 2 authentication drop-down menu Type your username in the Identity field The username is the email address added under Network-wide > Users for the specific SSID Enter the Password Click Connect There are other fields such (listed below) some of which are a requirement for a connection that are not mentioned in the documentation. Subject match Subject alternative name match Domain suffix match Anonymous identity

BlakeRichardson

I get where you are coming from. An "unconfigured" tick box would be a simple solution.

BlakeRichardson

I have the same issue, I just ignore it.

BlakeRichardson

Thanks everyone, using VLANs instead of subnet CIDR did the trick after waiting 20 odd mins. L3 interfaces are setup on the MX and I was pinging devices on the subnets not the L3 interfaces.

BlakeRichardson

I am trying to block traffic between two VLANS on an MX8CW and nothing I have tried works and I feel like it's probably something simple. I have tried blocking using CIDR and VLAN ( screenshots below), neither of the rules are showing any hits and I can ping devices from either direction. I have another rule not shown that blocks a device from accessing the internet and that works fine so I am out of ideas. If anyone has any suggestions that would be appreciated.

About BlakeRichardson

BlakeRichardson

Community Record

Badges