Meraki

BrandonS · ‎Feb 3 2022

Just speaking generally, that is pretty high to mount an AP without a directional antenna for effective use in warehouse isles. I imagine a lot of the signal is above where the clients are and is also being refracted by the shelves. External antennas are often used in warehouses, but not always needed. I have had good results with external patch antennas aiming down alternating isles from walls on each end. Have you thought about getting someone to come onsite to do a proper survey? If you don't do that you are just guessing and doing a lot of trial and error to hopefully to get things working satisfactorily..

BrandonS · ‎Jan 25 2022

Probably, but I have no connection to the project. They use an API key that you can create for the purpose of the backup and then revoke so it is hard for me to imagine anything nefarious that could really be done. Proceed at your own risk though and read through their security and FAQ sections to decide for yourself if you trust it.

BrandonS · ‎Jan 25 2022

I agree it is not necessary, but you could try this to have something to refer to "just in case": https://backupmeraki.com

BrandonS · ‎Jan 19 2022

I’m guessing OP does this to quicken time to manage various equipment with his laptop. It never crossed my mind, but I could see how it saves a few minutes when plugging your laptop into some equipment for maintenance, etc. maybe like a field tech that goes around and has to plug into different stuff with static addresses throughout the day. I’m curious to hear the reason too. Maybe there is a better way.

BrandonS · ‎Jan 19 2022

You can try, but I don't think building all the VLANs will stop the mismatch because you will still be having ARP replies from addresses you configured on your laptop, but not part of the native VLAN you are connected to. Ignoring the logs is probably best and to be expected for a non standard scenario like this.

BrandonS · ‎Jan 19 2022

If you remove everything else it should calculate to near one year exactly. There is a license calculator you can use to reproduce the scenario to see precisely, but it takes some time to work through: https://documentation.meraki.com/General_Administration/Licensing/Using_the_License_Calculator

BrandonS · ‎Jan 14 2022

I assume you are using Windows and missed this thread 😉 https://community.meraki.com/t5/Security-SD-WAN/Client-VPN-Error-After-January-Windows-Updates/m-p/137497#M34554?utm_source=communitymembers&utm_medium=email&utm_campaign=immediate_general Short answer, you need to remove a recent Windows update.

BrandonS · ‎Jan 14 2022

I don't know a way to lock a client to one AP, but you can broadcast the SSID from only a single AP. Would that work for you? Maybe you need multiple SSID's in this case like doorlock1 and doorlock2 each on it's own AP. https://documentation.meraki.com/MR/Other_Topics/Using_Tags_to_Broadcast_SSIDs_from_Specific_APs

BrandonS · ‎Jan 13 2022

For that SSID, yes. If your devices require it, you don't really have a choice except to have a separate SSID for legacy devices/printers/whatever requires a 2.4 only SSID.

BrandonS · ‎Jan 13 2022

Here is a screenshot of what I am suggesting and it was the only way I could get some home automation/iot gear to work on my home network:

BrandonS · ‎Jan 13 2022

Check the spec sheets or settings for those printers. If they only support 2.4GHz they may not join a dual band SSID. The log snip you shared indicates something is trying a 2.4GHz channel so it seems plausible so far to me.

BrandonS · ‎Jan 13 2022

@DarrenOC beat me to the question I would ask 🙂 I have come across devices needing a 2.4 only SSID and I think you still need to ask Meraki support to allow that if you want to try 2.4 only.

BrandonS · ‎Jan 11 2022

Not today (yet), but pretty much every Windows update brings me service tickets about broken client VPN and 100% of the time they are resolved by deleting and creating the VPN again. There is probably a quicker way and an underlying reason, but I have not cared to dig further personally.. EDIT: Apparently this time requires removing a Windows update. Keep scrolling..

BrandonS · ‎Jan 10 2022

I think #1 can be just a wrong password saved or someone trying passwords or just a failure due to something happening mid authentication like walking away or closing laptop, etc. #2 I think is related and is indicating the 4 way handshake for authentication failed possibly for the same type of reasons.

BrandonS · ‎Dec 13 2021

Not that I am aware of, but I like the idea. There is a summary overview page for MSPs that looks like this: and and

BrandonS · ‎Dec 3 2021

The MAC addresses are your clue. You need to check what devices they match in your network.

BrandonS · ‎Dec 3 2021

Yes. Via the local status page: https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page

BrandonS · ‎Nov 24 2021

I have never gone too deep into any API coding, but this is a really useful tool that leverages pretty much everything the API has to offer without needing to do much except read some directions and use Google sheets: https://developer.cisco.com/docs/meraki-tools-google-sheets-add-on/#!introduction/meraki-tools-for-google-sheets When the time comes I am sure I will learn more, I just haven't needed to yet 🙂

BrandonS · ‎Nov 23 2021

It always depends.. but, I would lean toward the MX as my default posture and might use the others in some specific cases.

BrandonS · ‎Nov 19 2021

A syslog server with search and alert ability would do this easily. Why do you object to syslog? You could do this with the free tier of papertrail and alert via email or SMS or Slack, etc based on a search term indicating port up/down changes as you define it.

BrandonS · ‎Nov 18 2021

Strane. I have the scroll bar for my MR32. When using 5 GHz, it is recommended to use at least 40 MHz channel width, as some client devices may not prefer 5 GHz unless it offers a greater channel width than 2.4 GHz. I would try changing just that and see if performance improves.

BrandonS · ‎Nov 17 2021

The Db measurement you see in the dashboard is actually signal to noise ratio (SNR), but you are correct about the recommendation of 25Db for voice and 32Db being fine, but not great. I agree channel 140 looks busy and would try to avoid using it. Are you sure both of the units you pulled these waterfall graphs from are 20MHz? Because I suspect they would look different for different channel widths. That, or maybe it decides to show the nearest channels as opposed to trying to fit the whole range? Or are they different model MR units perhaps? EDIT: I noticed there is a scroll bar under the graphs so you can scroll left or right to see the rest of the 5GHz channels 🙂

BrandonS · ‎Nov 17 2021

It won't be a problem. The MR licenses don't care about the model of MR unlike MX and MS that need to match exactly.

BrandonS · ‎Nov 15 2021

You need to select an option from right above that to renew as opposed to add new devices.

BrandonS · ‎Nov 15 2021

They are configured ONLY with a mobile phone app, but you can add the device in the web portal with the serial number. If you don't have the GR10 then you need to get the serial number from it. Step 4 covers this part- https://documentation.meraki.com/Go/Meraki_Go_Onboarding

About BrandonS

BrandonS

Brandon Svec

Community Record

Badges