Meraki

Kamome · ‎Feb 9 2022

Oh, silly me. I just found that Meraki IDS/IPS is basesd on Snort VRT ruleset, and Snort VRT ruleset is alias for Subscriber Ruleset, which is paid one. Welp, that means I cannot see every signature list in Meraki IPS ruleset. But I think that Registerd ruleset can give me general idea of current Snort signature database.

Kamome · ‎Feb 9 2022

Yeah. I looked up Event logs, and it says that "snort_rules_version : 2.9.15.1"

Kamome · ‎Feb 9 2022

As far as I know, Meraki IDS/IPS uses Snort VRT rulesets, but there are absolutely no information about ruleset itself. All I can find is Meraki uses Snort 2.9 rulesets, but I;m not sure it's bases on community or registered ruleset. If it's based on registerd ruleset, that means I cannot access full signature list until I buy or subscribe Snort. Does anybody know what edition of ruleset Meraki uses?

Kamome · ‎Jan 27 2022

Update : I got answer from TAC, and they said that some kind of SSL inspection on on-premise side is rejecting MR's SSL certificate because it's "unknown CA". And it seems recently updated firmwares(MX/MS/MR) are all using SSL certificate.

Kamome · ‎Jan 24 2022

For now, there are no way to connect MRs to another Internet connection. To do that, I have to disable VPN on the site. But I'll try it if forced firmware upgrade is failed. Thanks.

Kamome · ‎Jan 24 2022

I've seen this problem on MX several times, and most of them can upgrade firmware properly after manual rebooting. Plus, in that case, I can see firmware upgrading message on Local status page. But I cannot see any of these messages on MR.

Kamome · ‎Jan 24 2022

Oh, so it was firmware update problem. I'll check support case and trying to go RC firmware. Thanks.

Kamome · ‎Jan 24 2022

I have a network with one MX65 and two MR36s. AutoVPN is full-tunnel mode, so MR36 uses IDC's Internet connection. Since initial install, MR36 keeps losing connection between Meraki dashboard for 2 hours, then back on for 2 hours, and losing for 2 hours again, and keeps repeating. Initially, MX65's firmware version was 15.42.1, so I upgraded it to 15.44(latest stable). After that, it seems bit better, but still doing flip-flopping. (MR36's version is MR28.5) Surprisingly, user have no issues with wireless, and on-premise NMS which checks devices' availability via ping reports no problem with MR. Even other network which is in same Organization and using MR36 have no problem with Meraki dashboard connection. I'm running several MX65/68 and MR33/36 combos, but seems only MX65 + MR36 have problem. Is this can be hardware or software problem?

Kamome · ‎Jul 20 2021

I'm using ZABBIX to monitor Meraki hub device's performance score via calling Meraki API. But today I found that ZABBIX cannot get any perf score sice last week. When I check items in ZABBIX, all items got HTTP 429 error. I've running this server for about 2 years on Openstack, and 3 months ago migrated to AWS. But both are using my company's local Internet - not AWS IGW. So I run cURL from ZABBIX server's shell, and it still gets HTTP 429. I'm monitoring 30 devices and each devices polling API every 1 minute. Therefore, there are only 1800 API calls per hour. That's way below to Meraki AP call limit. Plus, I cannot understand why suddenly ZABBIX starts to get HTTP 429.

Kamome · ‎Jul 15 2021

Oh, there were mentions about expire alert. Thanks. But I remember that I got first alert 90 days prior to license expiration date, and got several more on the line. It seems there are kind of policy update inside Meraki Dashboard.

Kamome · ‎Jul 14 2021

As far as I know, license expire alert is sent at 90/60/30 days before expiration date. But I cannot find any mention of alert interval in documentations. Does anybody know intervals of license expire alert or documents that explains about it?

Kamome · ‎Jan 24 2021

I think I saw UTC in some area. b. Change log. As far as I remember, I have to calculate device add/remove time to my local timezone.

Kamome · ‎Aug 6 2020

How about change minimum bitrate to assure full compatibility? If that darn smart plug is too cheap or old, it could be use old internals.

Kamome · ‎Aug 2 2020

Use getOrganizationNetworks and it will brings you every network's information including timezone info within an organization. Device's timezone follows network's timezone which is device belongs to. https://documenter.getpostman.com/view/7928889/SVmsVg6K?version=latest#531675ad-b85b-4683-babc-d04f7f917bc3

Kamome · ‎Jul 17 2020

As far as I know, you can't control WHAT TO SEE(menu item), but only can control WHERE TO SEE(networks). Besides that, I want more sophisticated admin privilege control, too. Several of my customers wants to see more than monitoring stuff, but to do that I have to give read-only permission to them, and that comes with risk of configuration exposure. And many of members here will know the consequences.

Kamome · ‎Jun 24 2020

LIC-MR-ADV-1Y is Advanced Wireless license, and it only can apply to per-device license organization https://documentation.meraki.com/MR/Other_Topics/Cisco_Meraki_and_Umbrella_Integration_-_MR_Advanced%2F%2FUpgrade_License You have to get Enterprise license(LIC-MR-1Y) in order to apply to co-termination organization. Therefore, I think you have to choose one of these options. 1. Convert organization from co-termination to per-device license. By this way, you can use already bought license, but you have to keep in mind difference between co-term. and per-device model. 2. If you want to keep co-termination model, you have to buy renewal license again with LIC-MR-1Y. In this case, you have to discard already bought licenses.

Kamome · ‎Jun 24 2020

It seems you got Advanced Wireless license, not Enterprise Wireless. Could you list up MR license's Item name?

Kamome · ‎Jun 11 2020

According to spec sheets, MS355-24X2 can support 720W PoE. https://meraki.cisco.com/wp-content/uploads/2020/05/meraki_datasheet_ms355.pdf

Kamome · ‎Jun 11 2020

Me saw after photo

Kamome · ‎Jun 11 2020

Wow, I didn't know Cisco makes ANC headsets also.

Kamome · ‎Jun 11 2020

It seems your network is combined network, so Dashboard is trying to apply MX configuration even though there are nothing in there. I think splitting network into security appliance and wireless network will help you. Update : I made a typo. I changed "anything in there" to "nothing in there" to make it more clear.

Kamome · ‎Jun 10 2020

It's already updated! Although blog post is 2 years old, but linked zip file is up to date.

Kamome · ‎Jun 8 2020

I cannot find such feature in Dashboard too. But, how about using API and crontab to check ADSL link periodically and shut off guest SSID when ADSL is down? I'm using Lambda to check status and perform failover/failback between two vMXs. Why not using similar approach for WiFi?

Kamome · ‎Jun 8 2020

I heard that Mikrotik router can handle heavy traffic quite well because processor is more powerful than usual routers. (hEX can handle about 900Mbps NAT traffic) I think you can try one.

Kamome · ‎May 7 2020

I have both vMX and On-premise MXs, and I can't find L7 rules for countries neither of them. Could you show about that more particular?

About Kamome

Kamome

Jinuk Jung

Community Record

Badges