Meraki

smac · ‎Nov 7 2019

Regarding this specific vulnerability, I have a Cisco 2911 that I have put behind our MX100. This is a vulnerability from 2011. Will the Meraki still recognize an attempt to attack this vulnerability since it is past the three year definitions (I'm not using Balanced but Security) and the CVSS score on this vulnerability was only 5 I believe. My 2911's were originally on the edge and were getting a DDOS on this vulnerability. I upgraded the IOS but didn't slow them down. So I moved them to behind my MX100's. Just wanted to ensure I am seeing a realized benefit by doing that. Thank you!

Uberseehandel · ‎Nov 5 2019

Well the transition algorithms are clearly, set out. And, you don't have to be a 🤠😎🤓👀🦅 to know that the CNSA compliant algorithms are in use at most of the TLA organisations along with the "Swiftier" businesses, even in NZ (not living in Wellington, this might have blown past Aucklanders 😁 ). There is usually some stuffing around required to access the advisory memoranda. These algorithms are not used for the more seriously restricted material. But they are adequate for internal banking purposes.

Limitless · ‎Nov 1 2019

I hear you but when we had a problem with location I got my usual case closed reply. Mist surveyed the site plan, advised where they would place AP's to achieve location below 2.0m and replaced the Meraki for mist. On 4 occasions we have had issues with the location. Our AP's where located as per the meraki standard and we aren't even within 20m in the raw data. Sent reports with data from our data scientists and they still responded with case closed. Mist can achieve it and its only an integration so you can offer customers both depending on needs. Could honestly say have had no support or engagement in almost three years of building and selling a retail platform built on Meraki

Aaron_Wilson · ‎Oct 30 2019

I believe ANY means any IP which traverses it as a L3 router. For example if you had a downstream switch, ANY on the MX would not apply to layer 2 adjacent traffic. Also, ANY on the MX is both for subnets local to the MX and any subnets coming over autovpn.

Uberseehandel · ‎Oct 29 2019

So why would Meraki ignore IoT, and all the TVs and Sound systems that use BLE, as well as integrating with payment machines. They must have been shouted down by the barking dog.

KRobert · ‎Oct 29 2019

This is awesome @Uberseehandel! It really shows the versatility of Meraki.

Uberseehandel · ‎Oct 28 2019

Any residual doubt as to resilience - consult Chicken Little - (note the Meraki Corporate outfit and spectacles - obviously a longtime staffer)

BrechtSchamp · ‎Oct 26 2019

@PhilipDAth wrote: Well spotted. That looks like a bug! Check out Organization/Firmware upgrades to see when it is really scheduled. I can confirm, mine also show the wrong date in Network-Wide > General

Uberseehandel · ‎Oct 26 2019

switch to 802.11ad. Manufacturers are just milking their 5 GHz tech and sticking their heads in the ground. Everybody wants a piece of the 5 GHz spectrum.

BrechtSchamp · ‎Oct 23 2019

😂

Uberseehandel · ‎Oct 23 2019

You may disable NAT, if required. It appears that Bridge mode is only applicable if (multicast) IPTV is accessed.

Uberseehandel · ‎Oct 21 2019

Quote - Your problem will be that Office 365 will have lots and lots of IP address ranges. Conveniently, MS has a new service to supply the required IP addresses - Office 365 URLs and IP address ranges

sparrowhawk · ‎Oct 16 2019

Hi lpopejoy, that's interesting but I don't think my managers would allow me to use an unsupported feature in our environment. It may help others though, so thanks for posting.

viking · ‎Oct 15 2019

The part I missed was an update from the MS team.

Nash · ‎Oct 14 2019

@MarcelTempelman We absolutely use the outdoor APs in harsh "indoor" environments. Poorly HVACed warehouse that's 110-120F in the summer, -15F in the winter? Yeeeep, that's an outdoor AP for days. Doesn't stop people from accidentally selling indoor APs first, of course... sigh.

AndyM · ‎Oct 10 2019

@cmr I'm at the low level design/ building instructions phase of the design. So it will be while before I get my hands on the hardware.

PhilipDAth · ‎Oct 4 2019

Why don't you define a performance class and let the MX choose the best ISP automatically? There is an example for Web traffic. https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/Meraki_SD-WAN#PbR_with_Performance_Failover_for_Web_traffic What is actually doing the dot1x? A switch behind the MX, an MX, an MR, something else?

Uberseehandel · ‎Sep 29 2019

This really doesn't need to be done in hardware, it can be done in software. It is done in software on some other platforms. I can't see "rolling your own" as difficult project, for those so inclined. Frankly, I find ticketing for WiFi use abhorrent, and will not use it. I manage to travel widely without using ticket-based WiFi services.

Mio · ‎Sep 12 2019

Using 10GBase-T transceiver to connect MS425-32 and storage server. However, Meraki does not make a 10GBaseT SFP+ transceiver. U can purchase one from 10Gtek which have a good compatibility with Meraki. Here is the website: https://www.sfpcables.com/sfp-copper-transceiver-10gbase-t-cat-6a-7-20m

hockeydude · ‎Sep 10 2019

Verizon works

Mafferik · ‎Sep 9 2019

I've figured out the root cause: the Chromecast TV adapter was connected over a power line adapter (Extollo), which created connection problems. Not sure what exactly inside the power line adapter caused the connection problems, but after I connected with an Ethernet wire to the MX67, it worked again. To be clear the power line adapter worked fine for streaming, but somehow interfered with the Chromecast protocol preventing it from showing up in my streaming Apps on my smartphone. Thanks for all the responses.

PhilipDAth · ‎Sep 8 2019

You want to enable VLANs on the MX and assign a subnet to each there. https://documentation.meraki.com/MX/Networks_and_Routing/Configuring_VLANs_on_the_MX_Security_Appliance

cb123 · ‎Sep 6 2019

I have 3 networks in China. Latency problems getting here obviously but other than that no issues. I recently converted my Enterprise license to a security license, only lacking feature so far is AMP. I've had no problems setting up a "non meraki peer" vpn to my US meraki org. I source my equipment from AFScott/Moo moo networks for 2 years now, they have a meraki china rep but you can pay in USD, etc. As long as you don't route your default traffic through the tunnel to pop out in a different country you will be good in the eyes of China.

Pegasus79 · ‎Sep 5 2019

Do you have any vpn connections on the edgerouter itself. If yes thats your problem.

NolanHerring · ‎Aug 30 2019

Not sure to be honest if the old system or new system affects anything or does the same thing. Worth testing though

About Uberseehandel

Uberseehandel

Community Record

Badges