About BrandonS

BrandonS

When you had the issue did you follow the documented steps exactly? https://documentation.meraki.com/MS/Stacking/Switch_Stacks#Configuring_a_Physical_Switch_Stack

BrandonS

@ww wrote: no. switch with the lowest MAC address takes master role Really? Is that documented somewhere?

BrandonS

Here is the logging option I see on one system. No idea how I got it there..

BrandonS

I have noticed this from time to time, but I manage dozens of organizations and also notice that I do not see it on some systems. I haven't bothered to try to find out why yet. I have also noticed a checkbox for 'logging' next to rules on some systems.

BrandonS

Happy Birthday! Congrats to @PhilipDAth

BrandonS

Thank you, I think that was it.

BrandonS

Am I the only one that started recently to get email notifications for every post and reply to every board I am subscribed to? I did want and intend to see new posts for boards I am subscribed to and also replies to posts I have manually subscribed to or replied to, but I am seeing every post and every reply via immediate email now to all boards I am subscribed to.

BrandonS

Not to be to obvious, but you didn't mention if you entered street addresses for all your devices. Once you have done that it should look correct.

BrandonS

Well, back to MerakiDave's suggestion, I guess.. Look at a LAN side packet capture and see what is happening. If it is not right, call support and show them.

BrandonS

And make sure to reboot or reset network settings when testing. If you are just running ping and expecting it to stop within moments of applying the changes it won't.

BrandonS

That shouldn't matter. How about adding the reverse rule too?

BrandonS

When the rule is applied it won't affect current network flows immediately. You might just want to reboot the clients or refresh their network settings and test again.

BrandonS

Sorry to hear. That was a pretty bold move to deploy 180 of these though. I trialed a few when they came out and it was clear they had very limited features and would be difficult to fit into most organizations needs.

BrandonS

Check out Meraki.io for API documentation and demos. Here is one that might be a good start for your requirements: https://create.meraki.io/build/google-forms-with-the-dashboard-api/

BrandonS

I see what you mean now.

BrandonS

This is working as designed and as it should as far as I can tell. If the firewall rules are for all outbound traffic, your VPN clients are part of that outbound traffic when they route to the internet just like any other client. Maybe you could make another rule that allows everything for the VPN subnet? That way you can still have the firewall protection you intended for the rest of the network.

BrandonS

This may be helpful too: https://meraki.cisco.com/gdpr. Check the data retention tab.

BrandonS

Yes. You can overlay this on a floorpan (this one happens to have no floorpan loaded):

BrandonS

I just tried a packet capture and it worked fine. My dashboard is n34. Have you called support about it?

BrandonS

help > firewall info will show you the outbound ports you need allowed for management. for user traffic that is up to you and/or the security team I suppose.

BrandonS

This looks to be UK only and exclusive to Softcat? There is an iPhone app for it only available in the UK App Store. It looks nice and I hope it means the regular Meraki appall be updated soon.

BrandonS · ‎07-20-2018

@franco2018 wrote: I have full rights what am I missing? In that case, I would try clear cache, different browser, etc. and then call support if those fail.

BrandonS · ‎07-20-2018

That would normally indicate you don't have full organization permission and only network.

BrandonS · ‎07-20-2018

Or it is also possible the geolocation database has some incorrect information too. Either way, if you try to lock your network down to US and Canada traffic only you will need to be prepared to start whitelisting things.

BrandonS · ‎07-20-2018

Take a closer look at the traffic (packet capture) when you load a FB page. You will see it loads content from dozens if not hundreds of sites and many of them may be outside the US.

BrandonS

Community Record

Badges