Meraki

Uberseehandel · ‎Aug 7 2023

(From a distant place) Currently, my Internet connection is over 5G "Mobile broadband". There is a lot to like about it, but, many ISPs use CGNAT, (for reasons of unplanning and economy), this causes high latency, fortunately, I don't play computer games where this matters. Apparently it makes many online games unplayable, without some "jiggling around". Predictably, ISPs that use CGNAT are in denial. Allegedly the problem doesn't exist if the WAN interface can be configured to use IPv6 whilst leaving the LAN side IPv4.

Uberseehandel · ‎Apr 12 2022

@Overhead I am not currently using a Meraki stack, although I remain a big fan, so you are probably better off discussing this with some of the other posters on this thread or Phil D'Ath. Our Node-Red projects are very satisfying, in part because when working with multi-disciplinary teams, the user interface is really easy for engineers to interact with (and we hide the geeky protocol pizazz inside innocent sounding functions.

Uberseehandel · ‎Aug 19 2021

@AvielC wrote: Just started using MR44 here looks promising, I want to get everyone to work wirelessly as possible, and this seems like a show stopper to me. I'd rather have happy users accessing the network in a consistent manner without issues caused by events I have little or no control over.

Uberseehandel · ‎Jul 4 2021

@Nash Sorry I never got back to you I disappeared into hospital(again) contemporaneously with your post, and it slipped between the lines, as it were.

Uberseehandel · ‎Feb 3 2021

@RutterVR46 I use a personal SIM, not a roaming SIM. My package gives me free roaming in EU, North America, Australia, NZ a few other places, the upgrade was free. This is the EE offering - Free EU roaming | Roaming on EE | EE

Uberseehandel · ‎Dec 11 2020

@matthewthorp Many premium TV subscription services outside North America use multicast as their distribution vehicle, for such content as live Champions League. As far as I am aware, and I haven't tried it recently as I have a multi-stack solution in place, Meraki still has not implemented an IGMP-Proxy on its Gateway devices. This requirement is uncommon in Meraki's home market. They have no idea how much business they are missing overseas.

Uberseehandel · ‎Nov 17 2020

@DarrenOC My concern is that it doesn't end up in the hands of some Borat style individual (I am still shuddering at a vestigial memory of Borat in a mankini). @jbright If a potential client can fix a permit to build a new hotel in a ski resort, they can arrange technicalities such as work permits and customs. Most of the work could be done remotely. A somewhat distant acquaintance assures me that the locals are welcoming and full of charm. And who knows, quite possibly the skiing is OK.

Uberseehandel · ‎Nov 17 2020

Guys A new 4-star ski lodge owner has asked about how they should set up their network, usual stuff, WiFi, VoIP, smart TVs in each guest room, 65 of them, so not exactly a cabin. They have bought my suggestion that they hire a professional to design and run this project. Not a problem, you might think. Unfortunately, I can't go galloping off to deepest central Asia at the moment, or any time soon. Is there anybody with experience of running network projects in emerging economies? In this case Kazakhstan. It is not totally out in the blue, being 80km from Tashkent, I doubt it will be an exciting fee, but it is certain to be an experience. Regard it as a holiday to remember. There is nothing politically correct about the place, but it could be a holiday that pays for itself. Bear in mind, you aren't going to get kit from the Bay Area or Schiphol overnight and somebody is going to manage customs.

Uberseehandel · ‎Sep 2 2020

MQTT - got bitten by a mosquitto? Actually Message Queuing Telemetry Transport

Uberseehandel · ‎Aug 25 2020

Not infrequently modern domestic A/V equipment and equipment supplied by non-network companies have strange interactions with network hardware. I frequently have issues with UPnP and the way the problematic hardware sleeps. So it might sleep, or deep sleep or be hard off, aka the Micky Flanagan effect. These are adjusted in the standby settings. https://www.sky.com/help/articles/using-the-standby-settings#:~:text=Press%20Home%20on%20your%20Sky,select%20the%20setting%20you%20want. With any luck, if you configure one of out, out out, or, out out out then one of these options will reduce the number of messages. Practically, I deal with this by saving all the alerts in a directory which is self-clearing after 30 days.

Uberseehandel · ‎Aug 21 2020

@PhilipDAth Have you got into NodeRed yet? It is great when working with engineers whose main focus is not s'ware or networks. Also, being based on node.js it is ideal for real-time / event driven applications. As one hydrodynamicist said to me, "strewth, you're just wiring 'em up". Then I showed him how to do it. He bought a lot of tinnies that night.

Uberseehandel · ‎Aug 15 2020

We did look at using a Z3C in a urban foiling water taxi/bus application. We got it to work but for a complete package we went with a specialised safety services solution. Also we went to MilSpec connectors which were more appropriate. I think the box with connectors cost more than what went inside the box. Also, we went 5G LTE. 😎

Uberseehandel · ‎Aug 7 2020

@RumorConsumer wrote: understood, but from what i understand you wont be using access ports to connect to switches and APs as they themselves will be carrying several VLANs. I thought they all should be trunk ports carrying all needed VLANs. Only supplying a switch with one VLAN seems antithetical to the notion. Connections between gateways and switches switches and switches switches and Wi-Fi access points are effected by using trunk ports, with no native VLAN and the VLANs required to be passed are explicitly declared. This is illustrated in my earlier post which included a screen shot of Switch Port The Gimp / 10 There is no point in only passing a single VLAN to a switch, because that VLAN would have to be the Management VLAN and non-management traffic would not pass. Look more closely at all the screen shots I have posted you will see how this works.

Uberseehandel · ‎Aug 6 2020

A DHCP server is configured for each VLAN. Access ports (as opposed to Trunk ports) have a VLAN, a device connected to a port or a WiFi AP will be issued with an appropriate IP.

Uberseehandel · ‎Aug 6 2020

@RumorConsumer I do not add the native VLAN to anything. To do so risks giving spurious legitimacy to wild-weasel packets. Group Policy VLAN Schema WAP Port (Trunk)

Uberseehandel · ‎Aug 6 2020

@CharlesIsWorkin wrote: . . . I was wondering if you would use your Management VLAN (changed from VLAN 1) as the native VLAN on Trunks for between switches? Also, would you use the trunks native vlan to be the management vlan when connecting to a server with a virtual switch in it? @PhilipDAth @Uberseehandel I believe it is more secure to avoid using a native VLAN on trunks and to explicitly list the VLAN traffic to be passed. In some instances, the software will require that a native VLAN be entered; if this occurs, then enter the VLAN ID of a non-existent VLAN. For fairly self-evident reasons I choose to use VLAN 101 (aka Room 101).

Uberseehandel · ‎Jul 28 2020

What you are proposing looks very like what I have, so I suggest you proceed. Don't forget to explicitly declare the VLANs to be passed on the uplinks, and to pass the Management VLAN ID as well as the SSID VLAN IDs to the access points.

Uberseehandel · ‎Jul 28 2020

have you tried it ?

Uberseehandel · ‎Jul 28 2020

The switches and APs are on the Management VLAN. They get their IP address from the Management VLAN DHCP server on the MX.

Uberseehandel · ‎Jul 28 2020

I must have expressed myself poorly. I always ensure that the options of ALL and DEFAULT are not used. It doesn't matter what the default network is, avoid using it. The entire concept of a default value is insecure, inherently. As far as the example you have given is concerned, I'd observe: Why call a VLAN Default (is it a mistake)? Why give the VLAN 192.168.3.0/24 an ID of 1? You don't need a default VLAN. If you need to enter a VLAN value, when it is not required, use 101 (think about it). Always reference VLANs explicitly, not generically. Refer to them by their unique VLAN ID. Individually declare the VLANs to be passed by a trunk port. Declare the specific VLAN ID on access ports.

Uberseehandel · ‎Jul 28 2020

@RumorConsumer wrote: @Uberseehandel but ok to have the switches hanging out on vlan 1, nothing more, yes? It is more secure to avoid using VLAN 1 for anything. Put switches and APs on the Management VLAN, which most definitely should not be VLAN 1.

Uberseehandel · ‎Jul 26 2020

As @PhilipDAth says leave VLAN 1, but don't use it. If something "odd" is going on, the odds are the perps will use VLAN 1 as an egress. Not using VAN 1 makes it easier to monitor attempts to penetrate the network. Does this happen - yes. Does it all come from China - no.

Uberseehandel · ‎Jul 17 2020

Because I prefer switches to be seen rather than heard, I generally run fanless switches with only half the PoE capable ports used. If ambient temperatures stayed above 30C, I would expect the switches to get toasty. Above 25C I use a fan to keep the air circulating.

Uberseehandel · ‎Jul 16 2020

From the MS Azure Blog - https://azure.microsoft.com/en-us/blog/running-sdwan-virtual-appliances-natively-in-azure-virtual-wan/

Uberseehandel · ‎Jul 6 2020

@RebootNZ Are you getting multicast IPTV (from an 224.0.0.0/4 source) to pass correctly through an MX? Theoretically, the switches are capable of IGMP-snooping v2/v3. Given a spare configurable switch, one may also split out the IPTV, VoIP, Internet IP packets ahead of the MX and route the IPTV packets directly to another switch downstream of the MX. It sounds clunky but it works in some countries where the ISP (usually a POTS incumbent) isn't able to set up an IGMP-proxy.

About Uberseehandel

Uberseehandel

Community Record

Badges