Meraki

jdsilva · ‎Jun 18 2018

Yeh I didn't get mine either from the website. I just figured that some sales person would be calling me to follow up before they actually sent it over.

jdsilva · ‎Jun 18 2018

Since you're running them in warm spare they cannot give you a 250. You can't mix 'n match hardware types in warm spare. I suppose they could replace both with 250's, but I'd be surprised if they did that. That's a heck of an upgrade, and would also require a new license.

jdsilva · ‎Jun 18 2018

If I understand you correctly you'll want to set up the MXes in a Warm Spare configuration, and connect both Internet connections to both MXes. You can't have both MXes active, but you can have both Internet services active on the active MX. For the LAN side Meraki uses VRRP to give clients access out. You do not want to have two MXes in two different networks. https://documentation.meraki.com/MX-Z/Other_Topics/Warm_Spare#NAT_Warm_Spare

jdsilva · ‎Jun 15 2018

Man, my Google-Fu is failing me here. It doesn't look like any of the early outdoor MR's (58, 66, or 62) and I can't find anything that has those screws/bolts around the outside like that. But, I'm currently stranded in Pearson airport in Toronto for the next 5 hours so this might just be the challenge I need to get me through the night!

jdsilva · ‎Jun 15 2018

Good meeting you too @Mr_IT_Guy !

jdsilva · ‎Jun 15 2018

...And that's a wrap for Cisco Live! this year. Thanks to all the Meraki folks that I interacted with there. You all helped make #CLUS a lot of fun for me this year. It was good to put a few faces to names, and good to see people again that I'd already met.

jdsilva · ‎Jun 15 2018

The only knobs to control this are in Organization --> Settings But there's so many things these settings don't catch that, to us, they are effectively useless. We've expressed our desire for better control over both the emails and the banners to Meraki many times. Though our concern is also around that our customers get these emails too, which we don't want. You should see how many emails I get in a day... It's significantly more than 10 😞

jdsilva · ‎Jun 15 2018

Those messages are failed auth messages, i.e. someone's using the wrong password to get onto your network (a fat fingered password saved on the device perhaps?) I would ignore them on their own. But, if you can identify a specific user that's having issues and then look at them specifically in Wireless Health and there's a correlation then I would look into it further. Maybe start be deleting the saved SSID and then rejoin the network.

jdsilva · ‎Jun 15 2018

Meraki Solar?

jdsilva · ‎Jun 15 2018

You can only do MAC based or WPA2-Enterprise. WPA2-PSK isn't supported (by anyone AFAIK when you're doing RADIUS).

jdsilva · ‎Jun 15 2018

@Netwow you can do what you're asking. But given the info you've supplied it doesn't make sense from a design perspective. Just because you can do something doesn't always mean you should. I would encourage you to review your design and decide if this sort of setup really satisfies the requirements you have.

jdsilva · ‎Jun 14 2018

Check out Sonifi.

jdsilva · ‎Jun 14 2018

I was told by Joe Aronow this week it can be done. I thought I tried it and it didn't work but now I'm doubting myself...

jdsilva · ‎Jun 12 2018

I would just create a new VLAN on the switches and then convert the Guest SSID to bridged mode and dump to that VLAN. If the private Internet modem can't act as a router then obviously you'll need something there. You could go the cheap route and buy a D-Link at the local Bestbuy, or grab an Meraki MX64 for a more complete solution depending on your needs. As long as you don't create any SVI's on your switches for this VLAN you will have logical separation with no possibility of Guest traffic getting into your Corp network. Edit: Which is what @ww said...

jdsilva · ‎Jun 11 2018

That swag vending machine is full of goodies! Didn't see a skateboard in there though... 😞

jdsilva · ‎Jun 10 2018

I'm in the back corner at the orientation right now.

jdsilva · ‎Jun 10 2018

Contact certifications@meraki.com and they'll help you move your cert over.

jdsilva · ‎Jun 10 2018

... And made it!

jdsilva · ‎Jun 8 2018

Meraki has the following definitions for those states: Enabled - RSTP will be used when the port is connected Forwarding - RSTP is in use and the port is forwarding traffic https://documentation.meraki.com/MS/Monitoring_and_Reporting/Switch_Port_View#PortView-RSTP I'm not sure why they wouldn't both be forwarding unless LACP hasn't actually bonded the links? Seems not right...

jdsilva · ‎Jun 8 2018

That would work. It's effectively the same thing.

jdsilva · ‎Jun 8 2018

Hey @Mju. No, you cannot do this currently with that set up. That method will only provide failover. You would need this type of topology to do what you are asking: https://documentation.meraki.com/MX-Z/Site-to-site_VPN/Configuring_Site-to-site_VPN_over_MPLS

jdsilva · ‎Jun 8 2018

@Mr_IT_Guy Yup, I'll be at both of those events.

jdsilva · ‎Jun 8 2018

Yup! I would love to have this too. I recently brought up a link over some really old OM2 fibre running ~700m using LX optics and mode conditioning patch cables and it would be helpful to know these details to see how strong the link actually is. It is working, and operating at 1Gbps without errors... But I can't say how much room to spare we have levels wise.

jdsilva · ‎Jun 7 2018

I don't think you can... 😞

jdsilva · ‎Jun 7 2018

Right. I amended my reply above for a VPLS (or other layer 2 MPLS service). In that case you're right and it's the same layer 2 domain on both sides.

About jdsilva

jdsilva

Community Record

Badges