Meraki

IT_Bruh · ‎Mar 5 2019

Why is it that Meraki doesn't have the ability to block these attacks? You will see them on any RDS server that's exposed to the internet. Usually anywhere from several to dozens of attempts per minute from the same IP address. There should be a mechanism to block this behavior regardless of the targeted port or protocol.

soypablocr · ‎Jan 9 2019

Perfect. Thank you!

ww · ‎Jan 9 2019

yes you can

Adam · ‎Jan 8 2019

I plugged it directly into the MX but that port was setup on the same vlan as the wireless. Worked as intended, no issues.

Merakibgp · ‎Dec 20 2018

" The uplink port is the port the switch is using to talk to the Meraki cloud. It has nothing to do with up- or down-link within your LAN. " In Meraki switch, the uplink port must be connected to the Meraki cloud through internet, but port connected to internet must not be uplink port, can i say like this?

CarolineS · ‎Dec 18 2018

@Christian_Lopez - well spotted! But this isn’t the post he was hiding in - he was hiding in a post in Product and Technology Discussions.

dlevens · ‎Dec 12 2018

Any updates on this issue? I have been having this problem on my ms-220s and sure enough tried to update to 10.40 tonight and 1 of the 220s hung. It is not easy for me to get to this switch and rebooting the switch never seems to help. this issue has been going for over a year and still happening? Has anyone found a way to fix this remotely?

Chris-12 · ‎Dec 12 2018

Good morning, I have a similar question and was curious what your final configuration looked like. Did you end up taking a link directly off of the Inside interface of your firewall to your WAN MS switch? Did you create a separate mgmt vlan/network on your firewall, only for this switch? On the ACL piece, did you only allow access to the internet and block all internal networks? Is there a way to create an ACL to only allow the switch to talk to Meraki's cloud, if so do you know what those public IP's are? Thanks, Chris

KaylaEik · ‎Dec 10 2018

I am experiencing the same issue. I was able to work around it by going to the general settings and choosing to upgrade to the latest stable version, and it shows up under the Most Recent Changes in the Organization tab, but the "All Networks" tab seems to be "broken". Did you get any response back from Meraki support? I just submitted a ticket.

RichG · ‎Nov 27 2018

You might look at something like this: https://www.bhlpower.com/index.cfm?page=products&productid=1 It is similar to what others have suggested, but you can mount the patch panel in facing out and the switch facing up, plus it will hold a rack mount UPS.

DHAnderson · ‎Nov 16 2018

You might be able to use Group Policies and RADIUS to solve this issue. On your RADIUS server, you would create a user and password for each room. These would be the credentials that guests will sign into a particular Room. Configure your RADIUS server to pass a room name along as a parameter In Meraki, create a Group Policy for each room, naming the group policy the same name that the RADIUS server will send. Assign the VLAN ID in the group policy. Setup the WiFi SSID for guests to use your RADIUS authentication and layer 3 roaming. In each room, have the Chromecast use the room credentials for the WiFi. Guests get the room credentials so too they can sign into the WiFi. In this senerio, guests sign into the WiFi from any access points, can roam between any access points and be tied to a particular policy and VLAN and Chromecast.

NolanHerring · ‎Nov 8 2018

That is what I was thinking but I would imagine they knew before the public did so that they could address it internally.

RamseyComp · ‎Nov 7 2018

Hi Adam, Regarding the issue of natting public IPs in the tunnel. I have a non-Meraki vendor who will not allow a private IP address for the encryption domain. This is a one-way tunnel with the vendor sending files to our host. With our existing ASAs we can NAT public IPs inside the tunnel, no problem. Is this possible with the Meraki MX250? Thanks, Eric

CarolineS · ‎Nov 5 2018

Hi @Lupe - We've just released a new stencil set, in draft form - it includes an MX450. See this post for more info. Feedback is welcome! Cheers! - Caroline

macfaqulty · ‎Oct 31 2018

Found the solution. After weeks of not hearing from Vonage I complained of their lackluster service on Twitter and got a head tech manager to call me. He logged in and found that the Meraki was setup exactly as it needed to be and that the problem was the Polycom VX310 phones. Basically, don't rely on DHCP on those phones and type in DNS manually as well. Once we did this the phones acted correctly. Really strange issue. Also, three Vonage techs told me I was wrong and that the MX64 was not compatible. They are misinformed. Their site says MX60 is compatible when it should say MX6x - meaning MX61, MX62, MX63, MX64. The head Vonage tech laughed his ass off when he heard this.

fidel · ‎Oct 27 2018

I have tried all the javascript code snippets from postman but still not working yet i get a good result from postman software itself. I have actually written my entire codes in javascript hence would not like to switch to any other language. Is there any help

BlakeRichardson · ‎Oct 24 2018

Congrats!

SAMHINDI · ‎Oct 23 2018

Thank you all for your replies, I have managed to make it work, the only thing was , I've directed traffic (via traffic preference) of some servers to WAN1 which lead all the network to be directed to WAN1 , I guess this option only works for all the sub net even if you specify a certain IP. So when I've removed the preference , all worked like a charm! Flow preferences Internet traffic

nealgs · ‎Oct 23 2018

Another update/addition to this regarding icons on the Map view - they don't appear until you do a zoom operation now 😞

jdsilva · ‎Oct 19 2018

I got mine too. Thanks @CarolineS!

rodrigocostar · ‎Oct 17 2018

Hey, if you need to do that instead to power off the AP, and you dont have an Meraki Switch, you can schedule the ssid availability, going to "Wireless" --> "SSID Availability" 🙂

sambillings · ‎Oct 17 2018

AutoVPN technology is a unique solution that allows site-to-site VPN tunnel creation with a single mouse click. Configuring it is not a very easy task. If you are using MSI Gaming Laptop and getting a problem in installing its drivers then you may visit here at this link MSI Customer Support to know how to properly install the drivers.

Deviant · ‎Oct 14 2018

There is a support case open for this. See comment below from support dated June 22nd. Good news! I broke our lab. It took longer than in your network due to some validation checks that we do in our labs, but it looks like the switches are doing IPv6 DNS lookups (AAAA) as part of their connectivity tests. Now that I have it in a broken state, I need to do a few more granular tests, but I wanted to let you know that we have some progress!

Muxie2007 · ‎Oct 12 2018

I resolved the issue. Very simple one and dump stupid. I had not added the access VLAN on the switch itself

lsantiago · ‎Oct 9 2018

Here is another question. Do i need to create static routes for all my vlans on my Core and spoke locations

About Adam

Adam

Community Record

Badges