Meraki

rhbirkelund · ‎Aug 13 2020

The block is reserved for testing, I should still be able to configure it on an interface, that is not being used for traffic.

rhbirkelund · ‎Aug 13 2020

Today, while modifying a completely different VLAN this error showed up for a dummy vlan of mine: I was not able to continue, untill I changed the IP scope of this dummy vlan. Since when has this been a thing?

rhbirkelund · ‎Aug 12 2020

I tend to see "DNS is misconfigured" even while the configuration is verified, and correct. Often, it's due to some sort of caching going on, so I'd wait a couple of hours and see if it goes away on it's own.

rhbirkelund · ‎Aug 6 2020

2.4 GHz only is not a standard available feature, but you can just request it via Meraki Support, and they will enable it. Honestly, I doubt there is actually a live person activating it, when it comes to 2.4 GHz. Probably just a bot...

rhbirkelund · ‎Aug 5 2020

Try and create a dummy VLAN 999 with Subnet 192.168.255.0/24 and MX IP 192.168.255.1. Then set that dummy VLAN 999 as Native on ports 2, 3 and 4. Then make sure that all inter-switch links (links between switches) are trunk, with native vlan 999, and all VLANs are allowed on the trunk.

rhbirkelund · ‎Aug 2 2020

Hah... I was actually looking at that post earlier. Didn't see the he mentioned the Make A Wish..

rhbirkelund · ‎Aug 2 2020

Hey Where does one provide feedback on bugs in the Meraki Public Beta App? Just the Make A Wish? I have two screenshots to accompany.

rhbirkelund · ‎Jul 23 2020

I believe what @JimmyPhelan is trying to convey is that Meraki Autovpn feature only works between Networks within the same Organizations, in terms of Meraki. If you have MX'es at all locations, but they are not in the same organization, you'll have to treat the Site-to-Site VPN as third party VPNs. You will not be able to leverage Meraki's AutoVPN feature.

rhbirkelund · ‎Jul 23 2020

Are you perhaps able to share the configuration as shown in Uplink Selection and SD-WAN policies, found under Security & SD-WAN -> SD-WAN & Traffic Shaping?

rhbirkelund · ‎Jul 22 2020

Thanks for the appreciation. 🙂

rhbirkelund · ‎Jul 15 2020

In principle, as long as Juniper abides by the 802.3 Ethernet standard there shouldn't be any interoperability issues. Make sure the SP provides a /30 (or /29 for Warm Spare setup), and a RJ45 jack, assuming anything lower than MX250.

rhbirkelund · ‎Jul 7 2020

Since you are replacing an ASA with an MX, I'll just have to say this. A Meraki MX100 is not a Cisco ASA firewall. So don't be surprised if there is some functionality in an ASA that isn't present on an MX. I've had my fair share of rogue Sales persons, thinking an MX can simply replace an ASA, without having looked into the running configuration. You can not assign an IP address to an physical interface of an MX (or any other Meraki product). So in order to obtain what you are depicting, you'll have to create a VLAN on the MX, and assign it an IP, and a SVI interface on your core switch. Just as others already have mentioned. Basically, what you are doing is, a Layer 3 topology as described in https://documentation.meraki.com/Architectures_and_Best_Practices/MX_and_MS_Basic_Recommended_Layer_3_Topology Assuming you are handling DHCP somewhere else, then creating the VLAN on the MX, remember to disable the DHCP server, that is created by default.

rhbirkelund · ‎Jul 7 2020

No, it is not possible to configure a PSK shorter than 8 characters.

rhbirkelund · ‎Jul 7 2020

To my knowledge, a Meraki MX can not perform spam filtering for email addresses.

rhbirkelund · ‎Jul 4 2020

No worries. 🙂 But like I said, if there is no degraded performance, and no-one complains, then there probably isn't that much of a problem. I'd just monitor for now. 🙂

rhbirkelund · ‎Jul 4 2020

I suppose. This is my MX64 at home, behind an ADSL modem. The more traffic there is, the more packet loss I'd expect. I doubt most people work during evening and night, and thus not as much traffic as there would be during normal working hours.

rhbirkelund · ‎Jul 4 2020

"Yes, I'd like to keep it simple, I guess I'll need an MR then [...]" An MR and probably either a Power Injector or a DC power supply, assuming the ISP router does not provide PoE. The MR33 is a standard indoors AP, with a List Price of USD $649 Then there is an MR30H, which provides 4 switch ports one can use to connect additional client devices. It's marketed toward Hopitality, and has a List Price of USD $599. Finally there is the lowest tier AP, MR20, which has a List Price of USD $299. You might be able to get them cheaper. Like I mentioned, it's a List Price.

rhbirkelund · ‎Jul 4 2020

That curve shows ping statistics from the WAN port to (most probably) Google DNS 8.8.8.8. So I would probably assume something between the MX and upstream is dropping icmp packets. Aside from checking L1 at the MX (verify cabling is properly connected, no damage to cables, no dirt on SFP/fiber connectors), I'd open a ticket with your service provider, to verify it isn't something on their end. However, unless you or your users are experiencing any degraded service, I'd probably just leave it alone and monitor.

rhbirkelund · ‎Jul 4 2020

In retrospect, that kind of makes sense, actually. I probably wouldn't want an unprovisioned device responding openly to pings. Great find, @SobyKuruvilla !

rhbirkelund · ‎Jul 2 2020

Purely out of curiosity, why would you like to disable AX?

rhbirkelund · ‎Jul 1 2020

I have seen before, that for some unknown reason, the SFP inserted to an MX, just crashed. Pulling it out, and reinserting the SFP made it come up again. Not sure if that's the case. Perhaps try that?

rhbirkelund · ‎Jun 30 2020

I have a CCNA (R&S, Wireless according to the old model), and DevNet Associate. I was working on a CCNP Wireless, but never got to finish it before February. Passed two out of four of the exams, though.

rhbirkelund · ‎Jun 30 2020

Ah, sorry, I didn't see your note. If it's the first time registering, it is probably doing first time update. Try and give it some time. It's it probably downloading firmware,upgrading, rebooting a couple of times. What colors in the status LED is the MX showing on the front?

rhbirkelund · ‎Jun 30 2020

Your MX450, might not be allowed to reply to ICMP pings. Under Security & SD-WAN -> Firewall what does it say in the filed Security Appliance services?

rhbirkelund · ‎Jun 30 2020

What changes do you want to be frozen? If firmware updates are scheduled by Meraki, you are free to cancel them, or reschedule to some other day, which suits you better. No firmware is forced upon.

About rhbirkelund

rhbirkelund

Community Record

Badges