About GreenMan

GreenMan

Maybe you're looking for the Guest Ambassador Admin type...? https://documentation.meraki.com/General_Administration/Managing_Dashboard_Access/Managing_Dashboard_Administrators_and_Permissions#Network_Permission_Types

GreenMan

They disappear

GreenMan

API keys are tied to a user's account, not any one Organization so you won't find it in the Org > Change log. Find the latest key info under the relevant user profile: login to Dashboard via the appropriate user account, then click the 'head and shoulders' icon top right. Then click 'my profile' and search for API access. It will give you a clue as to the currently valid keys (last four characters) https://documentation.meraki.com/General_Administration/Other_Topics/Cisco_Meraki_Dashboard_API

GreenMan

https://developer.cisco.com/meraki/api-v1/get-device-wireless-connection-stats/

GreenMan

There are a number of different things that could cause this. I'd contact either the Cisco partner you purchased through or (possibly and) your Meraki account team. If this is unrelated to Asad1's query, you should put this as a separate question in the community. It doesn't appear to be the same problem.

GreenMan

Suponiendo que haya configurado la regla correctamente en Security & SD-WAN > Site-to-site VPN supongo que había un flujo activo establecido que coincidía con esta regla. El cambio de regla solo comenzará a aplicarse una vez que el flujo activo se elimine de la tabla MX. Si necesita realizar una prueba de inmediato y puede permitirse el tiempo de inactividad, reinicie el MX para verificar.

GreenMan

Run this endpoint against any Network returning "VLANs are not enabled....." https://developer.cisco.com/meraki/api-v1/get-network-appliance-single-lan/

GreenMan

I'm afraid I don't know the answer to this Q, but posting it in the Mobile Device Management forum would have helped make it clearer hat you were asking about, Meraki-wise: https://community.meraki.com/t5/Mobile-Device-Management/bd-p/enterprise-mobility-management

GreenMan

If I remember rightly, you can deploy multiple overlapping profiles, in which case the most restrictive setting is applied.

GreenMan

I'm wondering if you maybe didn't get the right license to match the device you have. For wireless APs, each model uses the same license LIC-ENT (you just choose the duration 1, 3, 5, 7 or10). But MX or MS to some degree depends on the model of appliance or switch you buy. E.g. a 24-port license is no good if you have a 48-port switch. As ww said, the Organization > License info page should tell you Or maybe you have insufficient license quantities? You need one license per device

GreenMan

If you look for Meraki config and restore in GitHub, there are a bunch of scripts available there covering this area. If you're after something slicker, less DIY and more structured (but chargeable), there are a number of Meraki Ecosystem partners who cover this kind of API-based automation. These are two I've seen 'in passing', but they're not alone in the Network Automation area of the Ecosystem website: https://apps.meraki.io/en-US/apps/380757/boundless-%7C-automation https://apps.meraki.io/en-US/apps/394857/dna-assure

GreenMan

I believe the question was about the uplink data rate provided, rather than the PoE level (?) There would be nothing stopping a client associating at the high data rates, on an AP uplinked at just 1 Gbps and they will likely not see too much difference in performance (they're going to have to be right under the AP, with an expensive/powerful device to get them anyay). You're much more likely to have uplink bandwidth concerns if you have loads of clients connected to the same AP, even if they're not connected at the very highest data rates - but they are generating a lot of traffic. In such instances though, you may well hit channel availability issues before you hit the 1 Gbps ceiling.

GreenMan

Wired connection - simple? Really...? Also: think about battery consumption - BLE was chosen for a reason

GreenMan

Esto puede variar ampliamente y estará dictado principalmente por el entorno (qué obstrucciones hay, etc.) Las paredes, por ejemplo, atenuarán y reflejarán las señales, y en diferentes niveles, dependiendo de los materiales utilizados. Una serie de otros factores locales también cambiarán la potencia de transmisión aplicada por las radios de los puntos de acceso, por ejemplo, para evitar interferencias con otros transmisores en la misma frecuencia. Realmente deberías tener un sitio realizado. Este tipo de cosas se analizan con más detalle aquí: https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MR_Wireless

GreenMan

OK so, with no more Catalyst switches in the LAN, you will be employing just RSTP 👍 Just follow the general recommendations for configuing STP on Meraki switches - in particular make sure your MS425 stack is your root bridge

GreenMan

Assuming your MS425 units are co-located, stacking cables would be MA-CBL-40G-1M (1 metre version). -50CM or -3M versions are also available. https://meraki.cisco.com/wp-content/uploads/2020/05/meraki_datasheet_sfp.pdf If they are more widely separated (unlikely, if you're replacing a sigle chassis), look at using Flexible Stacking, via fibre links: https://documentation.meraki.com/MS/Stacking/Switch_Stacks#Understanding_Flexible_Stacking You should look into using OSPF as an alternative dynamic routing protocol, supported by the MS425s (and the 355s, if you need to route on those too). You will need to look into what other routers / layer-3 switches the 4500 is currently exchanging routes with using EIGRP and possibly transition them to OSPF too. Likewise any other routers, beyond, in the same EIGRP setup. I'd also check whether a full routing protocol is really needed. Often, if you're on the periphery of a larger network you can achieve similar outcomes using (say) a static route or routes to a virtual IP address (a pair of routers running HSRP / VRRP, for example). Not sure what else you may have, switching-wise, downstream of the 4500, by way of access switches, but you will want to check out the Spanning Tree setup; MS switches do not support the proprietary PVST / PVST+ that Catalyst switches are usually running. https://documentation.meraki.com/MS/Meraki_Campus_LAN%3B_Planning%2C_Design_Guidelines_and_Best_Practices#STP_in_a_Hybrid_LAN I'd recommend you hook up with an experienced Cisco Partner to help you with this project.

GreenMan

Assuming the spokes are connected to a common virtual MX in the same Umbrella DC you can consider it that Umbrella itself is not decrypting the traffic. The vMX will effectively doing this, I suspect, when flipping between the two tunnels

GreenMan

vMX-L for Azure is in the works, but not currently readily accessible. Contact your Meraki account team, to see if they can get you onto the closed beta. In the meantime, n x VMX-M if you need a scaled production environment now.

GreenMan

Did you raise a case with Meraki Support?

GreenMan

Por profiles don't apply to MR76 - see here: https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/Port_Profiles#Applying_profiles_to_APs_with_2_ports It is possible though, in principle, to extend wired LANs across a Meraki MR-based wireless link, in roughly the way you want. You will want to read this thoroughly, if you haven't already: https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/Extending_the_LAN_with_a_Wireless_Mesh_Link You'll note that port profiles are not used as part of this setup.

GreenMan

To my knowledge there are no API endpoints for this, currently

GreenMan

Many clients seem to do strange things, when 11v process happens (this changed significantly with MR29, on the Meraki side). Many environments work more reliably with client balancing disabled, for this reason, it seems. (Hence net new Meraki setups have it disabled by default). Maybe try with balancing enabled, but be prepared to switch off if you see issues of this type.

GreenMan

If you don't use vMX, you'll be using non-Meraki VPN, which is a whole load less functional and more difficult to build resilience

GreenMan

As mentioned before, I think you need "no hub to hub" to be enabled

GreenMan

Are you using vMX in Azure for this? (Definitely recommended!)

GreenMan

Community Record

Badges