- About wirednot
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
wirednot
Getting noticed
Member since Aug 21, 2017
03-31-2019
Community Record
25
Posts
6
Kudos
0
Solutions
Badges
03-29-2019
05:21 AM
Any updates to this? I just ran into this after relocating switches that were daisy chained. It’s pretty ridiculous that hardware at this price point and sold as enterprise gear can’t be shown with its current topology as that topology changes. Time to write a shame blog.
... View more
05-29-2018
08:10 AM
It is set to the max of 500 Mbps. Every test I throw at this (and I have deployed a lot of MXs in the last nine years) says that this MX is not living up to spec.
... View more
05-21-2018
07:31 AM
Back from vacation- I did check the admin pages- there is no option to "nail" the interface to Gig- auto is only choice. For 100 and 10 you can specify duplex etc, but for Gig, auto is it. Given that the MX shows no stats or counters (which is complete BS after all of these years) and the switch side reports Gig with no errors, I have to assume that all is well at Gig between MX and switch. This is further evidenced by what follows: On the advice of TAC support engineer- turned off advanced security and retested. Throughput is essentially doubled, now in the neighborhood of 225 Mbps. Still less than half of what's expected on the MX90 firewall throughput capacity.
... View more
05-10-2018
04:46 PM
Think inline L2 bridging firewall. @Adam wrote: @wirednot wrote: Not at all. Not leaving local network, and as I mentioned you take the bridge mode MX out and the connection goes back to near gig traffic. Maybe I'm not understanding something correctly but when you are in bridge mode wouldn't the gateway move off of the MX to a different device? Where is your gateway? Possibly L3 switch? If the gateway is on a Layer 3 switch then the traffic shouldn't even be traversing the MX regardless of what mode it is in. You said LAN based traffic, how are you testing the throughput, iPerf?
... View more
05-10-2018
03:34 PM
Think inline L2 bridging firewall. @Adam wrote: @wirednot wrote: Not at all. Not leaving local network, and as I mentioned you take the bridge mode MX out and the connection goes back to near gig traffic. Maybe I'm not understanding something correctly but when you are in bridge mode wouldn't the gateway move off of the MX to a different device? Where is your gateway? Possibly L3 switch? If the gateway is on a Layer 3 switch then the traffic shouldn't even be traversing the MX regardless of what mode it is in. You said LAN based traffic, how are you testing the throughput, iPerf?
... View more
05-10-2018
03:32 PM
Interesting. Could it be at 100 on local config page but show Gig in MX status GUI?
... View more
05-10-2018
02:45 PM
Not at all. Not leaving local network, and as I mentioned you take the bridge mode MX out and the connection goes back to near gig traffic.
... View more
05-10-2018
12:44 PM
I have MX 64s, 65s, 80s, 84s, 90, 100, 250, and 400s- this is the first of seen of this, but also the first time I'm using an MX in bridge mode. Not sure if there is anything related to what I'm seeing, but it's extremely easy to show the defect condition right now.
... View more
05-10-2018
12:29 PM
14.x is beta- absolutely won't run beta here for fear of Cisco code culture of suck having settled in to Meraki.
... View more
05-10-2018
12:25 PM
This is a new topology
... View more
05-10-2018
12:23 PM
If I do, it's on the MX side where you can't see what's really going on. GUI says 1 Gbps for that interface, and its absolutely 1 Gig on uplink
... View more
05-10-2018
09:54 AM
sure, but it feels sleazy on some level. But then again, for the price of licensing, I could probably live with myself:)
... View more
05-10-2018
09:43 AM
Scenario: for the occasional conference/event, it's handy popping up small MX and a couple of APs. What's not handy? Paying for licenses for gear that sits on the shelf until needed. Would be nice if an X year license decremented on actual days used in this case somehow.
... View more
05-10-2018
09:34 AM
The rated throughput on the MX 90 is 500 Mbps for firewall, 250 Mbps for advanced security. I'm using one in simple bridge mode. Despite both interfaces on the MX and the NIC on the client device under test all connecting at Gig, the MX 90 is acting as a 100 Mbps +/- 10 Mbps bottleneck. Take the 90 out, throughput goes back up to almost full gig. The WAN uplink setting is for 500 Mbps, and there are no traffic controls whatsover set. It appears that the MX just doesn't deliver what spec says it should. Any thoughts or similar experiences?
... View more
02-09-2018
07:45 AM
Unfortunately, I don’t know about any cloud-hosted syslog servers. It is disappointing that the NAT records are not part of Meraki event logs- that’s a big black hole.
... View more
02-09-2018
07:29 AM
Thanks for the kind words, CHAadmin. Are you syslogging the Meraki environment? If so, I may be able to help you.
... View more
02-09-2018
07:08 AM
Beyond roaming- I have no concerns with any of the limitations. Bonjour is $hit, shouldn't be used on business networks to begin with, Fastlane is a gimmick, we generally avoid multicast on the WLAN. Still curious about the "high load" thought- given that CPU/memory can't be really seen.
... View more
02-09-2018
06:21 AM
Interesting- many years ago (over 8) I was assured that there was no concern with using NAT on APs (beyond roaming). I'm curious what "high load" amounts to in your context. I have around a dozen branch sites, and public IP space is absolutely at a premium for clients (our branches share Class B public IP with our main campus) and the NAT functionality has been generally transparent and tremendously helpful. Roaming no worse than on our Cisco campus network, generally. Good clients switch quick, draggy clients drag. But- no VoIP for us either. When I hear that "you shouldn't use it" my first thought is why does Meraki not message that responsibly right on the UI?
... View more
02-09-2018
05:56 AM
Just noticed that a Meraki employee is recommending against the use of NAT mode- I find that odd!
... View more
02-09-2018
05:55 AM
I'm using NAT mode on Meraki APs, and use Syslog to find my issues. It's not a one step process- you can usually find the trouble flow between the destination address and the AP itself (the "outside address" for the AP NAT, hopefully with timestamp. Then... you search on destination address and 10.x addresses that the AP is handing out- possibly with the AP Name as well. It's clunky but far from impossible, but it does suck that Meraki does not provide syslog as well if it's going to do everything else... I use Splunk, and as long as you're willing to do a few steps and can keep it all straight, you can certainly work within the NAT as well for sleuthing around.
... View more
09-19-2017
02:20 PM
Is really no specific thing I have in mind, just something that negates the dollars left on the table from orphaned licenses. Your example is certainly better than the current alternative.
... View more
09-12-2017
03:52 PM
Thanks, all that I get. I'm talking about removal and retirement of a device, with active license left. Not simply repurpose of a device. Been a Meraki customer since long before Cisco aquisition, and get all the things you CAN do. I'm talking about orphaned licenses that will run out unused.
... View more
09-12-2017
03:20 AM
We are doing some evolving of our network and end up with a number of MXs no longer in use, never to return. Each has at least two years of licensing left. In the Cisco world, we'd drop these from Smartnet to not pay for support on something unused. For the steep price of Meraki licenses, it would be nice to be able to do something with the remaining time on these no-longer-needed licenses- like stretching out the license period for the rest of the organization. I get that refunds would be silly, but why not give some sort of credit when a device is removed for good but has years of license life left?
... View more
Labels:
08-21-2017
12:50 PM
6 Kudos
Lee Badman here- long-time Meraki user (since well before Cisco acquisition) and freelance analyst/writer. Have covered Meraki often through the years. (my articles are easy to find online). Also use Meraki in my own small company outside of the day job as WLAN functionary for large university (we use Meraki as branch solution in several states/countries). I'm a fan of Meraki, but I also eval other cloud vendors regularly. Hoping the Meraki community discussions provide value, looking forward to contributing.
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 6 | 15704 |
