Meraki

rhbirkelund · ‎Jul 7 2020

No, it is not possible to configure a PSK shorter than 8 characters.

rhbirkelund · ‎Jul 7 2020

To my knowledge, a Meraki MX can not perform spam filtering for email addresses.

rhbirkelund · ‎Jul 4 2020

No worries. 🙂 But like I said, if there is no degraded performance, and no-one complains, then there probably isn't that much of a problem. I'd just monitor for now. 🙂

rhbirkelund · ‎Jul 4 2020

I suppose. This is my MX64 at home, behind an ADSL modem. The more traffic there is, the more packet loss I'd expect. I doubt most people work during evening and night, and thus not as much traffic as there would be during normal working hours.

rhbirkelund · ‎Jul 4 2020

"Yes, I'd like to keep it simple, I guess I'll need an MR then [...]" An MR and probably either a Power Injector or a DC power supply, assuming the ISP router does not provide PoE. The MR33 is a standard indoors AP, with a List Price of USD $649 Then there is an MR30H, which provides 4 switch ports one can use to connect additional client devices. It's marketed toward Hopitality, and has a List Price of USD $599. Finally there is the lowest tier AP, MR20, which has a List Price of USD $299. You might be able to get them cheaper. Like I mentioned, it's a List Price.

rhbirkelund · ‎Jul 4 2020

That curve shows ping statistics from the WAN port to (most probably) Google DNS 8.8.8.8. So I would probably assume something between the MX and upstream is dropping icmp packets. Aside from checking L1 at the MX (verify cabling is properly connected, no damage to cables, no dirt on SFP/fiber connectors), I'd open a ticket with your service provider, to verify it isn't something on their end. However, unless you or your users are experiencing any degraded service, I'd probably just leave it alone and monitor.

rhbirkelund · ‎Jul 4 2020

In retrospect, that kind of makes sense, actually. I probably wouldn't want an unprovisioned device responding openly to pings. Great find, @SobyKuruvilla !

rhbirkelund · ‎Jul 2 2020

Purely out of curiosity, why would you like to disable AX?

rhbirkelund · ‎Jul 1 2020

I have seen before, that for some unknown reason, the SFP inserted to an MX, just crashed. Pulling it out, and reinserting the SFP made it come up again. Not sure if that's the case. Perhaps try that?

rhbirkelund · ‎Jun 30 2020

I have a CCNA (R&S, Wireless according to the old model), and DevNet Associate. I was working on a CCNP Wireless, but never got to finish it before February. Passed two out of four of the exams, though.

rhbirkelund · ‎Jun 30 2020

Ah, sorry, I didn't see your note. If it's the first time registering, it is probably doing first time update. Try and give it some time. It's it probably downloading firmware,upgrading, rebooting a couple of times. What colors in the status LED is the MX showing on the front?

rhbirkelund · ‎Jun 30 2020

Your MX450, might not be allowed to reply to ICMP pings. Under Security & SD-WAN -> Firewall what does it say in the filed Security Appliance services?

rhbirkelund · ‎Jun 30 2020

What changes do you want to be frozen? If firmware updates are scheduled by Meraki, you are free to cancel them, or reschedule to some other day, which suits you better. No firmware is forced upon.

rhbirkelund · ‎Jun 30 2020

You can not SSH to a Meraki Switch. Perhaps take a look at this article; https://documentation.meraki.com/MS/Access_Control/Configuring_802.1X_Access_Policies_on_MS_Switches_using_Windows_2008_NPS Perhaps you can use some of the information in here.

rhbirkelund · ‎Jun 30 2020

The builtin wifi in an MX isn't an AP, yes. It lacks many of the functionalities that you have in an MR. But if the MX is placed in some wiring close in the centre of a concrete building, with absolutely no cellular coverage, it's nice to have some Wifi connectivity. I've been in enough situations where I needed to call someone while installing an MX, with no cellular coverage, and still needed connectivity to the MX. Mainly because of troubleshooting the CPE with the ISP.

rhbirkelund · ‎Jun 29 2020

If you want to replace the ISPs router, you'll need to ensure that whatever you replace it with is supported. And that the ISP supports you putting your own device. That is not always the case! If you want to replace the router, an MX68W would perhaps be a good replacement. Builtin wireless capabilities, and two PoE+ ports, allow you to add 2 MR APs directly to the MX. Roaming between APs and MX wouldn't be good though, but it'll work (assuming the correct configuration..!). There are alternatives to Cisco Meraki, such as Ubiquity. It also has a cloud management solution, for its network devices, and afair, cheaper. However, I can't speak for how it is, since I have never really had the opportunity to work with it.

rhbirkelund · ‎Jun 29 2020

VRT-2207620184848 This is not a Meraki Serial number.

rhbirkelund · ‎Jun 29 2020

What @PhilipDAth says is correct. You only need an MR access point, perhaps placed above or near the cashier. If you plan on wanting to do something that can scale, and you're not that IT knowledgeable I'd suggest you get in contact with a local network integration company, that specialises in installing and configuring network devices. This will make sure you have some one to call, incase there are any problems, and not being "on your own" when something goes south. 🙂 That being said, it doesn't neccesarily need to be some large network installation. Just an MR ap would probably suffice. More, if you need a larger coverage, and perhaps a small MS120-8P switch.

rhbirkelund · ‎Jun 29 2020

Have you verified the IP addressing from the ISP? That it is correct on their end?

rhbirkelund · ‎Jun 29 2020

There are no wireless capabilities on an MS250-24P switch. You configure 802.1x, by navigating to Switch -> Access Policies, and configure the radius server. Afterwards, navigate to Switch -> Switch Ports, select the ports you wish to configure, and click Edit. Then on the drop-down on Access Policies, you select the Access Policy you created earlier. More about Access Policies and 802.1x can be seen here; https://documentation.meraki.com/MS/Access_Control/MS_Switch_Access_Policies_(802.1X) Edit; hah - I'm too slow. xD

rhbirkelund · ‎Jun 29 2020

I was just curious to see if could be something with the negotiated bitrate and modulation schemes jumping up and down. Setting to minimum bitrate of 12, disables legacy modulation schemes which could induce some interference. However, this could also result in reduced coverage, since it will require a higher SNR. On the other hand, allowing the lower bitrates will also make your Wifi coverage larger and more robust, enabling you to keep a connection with a lower SNR. Pros and cons. 🙂 Have you tried setting up an iPerf server, and measure throughput that way?

rhbirkelund · ‎Jun 29 2020

Copy the working radio profile, and move alle the APs to the new profile. Then tweak the new profile. Assuming you haven't already, move the Minimum Bitrate slider to 12, to disallow all legacy bitrates, and see if that changes anything. Make sure to set Band selection to Per AP in the Profile -> General section. If you get more issues, you can just move the APs back to the original Radio Profile.

rhbirkelund · ‎Jun 28 2020

Have you applied a custom radio profile? How is it conifgured?

rhbirkelund · ‎Jun 27 2020

Instead of using the megaproxy, just use api.meraki.com. I know it's there, but I have not seen anyone officially using it.

rhbirkelund · ‎Jun 25 2020

The thing is, in the end, you can not avoid getting rate limited. If you submit more than 5 requests per second, it triggers the rate limit. What you can do, is just be sure to handle it accordingly. That, or you can make sure to throttle your script manually but putting in sleep timers. Or you can look into Action Batches

About rhbirkelund

rhbirkelund

Community Record

Badges