The Meraki Community
Register or Sign in
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • About Lia
Lia

Lia

Comes here often

Member since Dec 5, 2017

‎08-21-2018

Community Record

4
Posts
0
Kudos
0
Solutions

Badges

1st Birthday View All
Latest Contributions by Lia
  • Topics Lia has Participated In
  • Latest Contributions by Lia

Re: block personal devices

by Lia in Wireless LAN
‎01-05-2018 07:41 AM
‎01-05-2018 07:41 AM
we use JAMF as our MDM. I think we'll give this a shot. ... View more

Re: block personal devices

by Lia in Wireless LAN
‎01-04-2018 09:27 AM
‎01-04-2018 09:27 AM
Thanks, unfortunately at $30-40 a device, were looking at roughly $5300/yr and yeah... any increase in budget is a no-no for us. We're not on a team that holds a lot of weight when making recommendations/suggestions to management. I'm a bit hesitant to use System Manager as well since features such as the policy by device type is so inaccurate...have u had good experiences with it? ... View more

block personal devices

by Lia in Wireless LAN
‎01-04-2018 07:10 AM
‎01-04-2018 07:10 AM
Wondering if anyone has done this before and can offer some tips on how to implement a solution...Here's our situation..   We're mainly a Mac shop with maybe 10-15 Windows users We have our MX32 units set up to use RADIUS and user authentication Mac machines are not domain-bound  What we need to do: Prevent all non-company devices from connecting to our corporate/internal wifi What we've looked at: Attempted to block MAC addresses on the RADIUS policy side but Apple does not have a set range of MAC addresses for each of their products Attempted to use Meraki's "apply group policies by device type" setting but failed miserably -- when we tested by blocking all iPhones and Androids from our corporate network, Meraki started flagging all phones and some macbook pros as iPhones and blocked the company laptops from connecting Swap to machine authentication instead of user auth -- cannot do this because the Macs are not domain-bound and can't simply use certs from our CA Swap to machine auth by using Meraki's System Manager -- cannot do because cost and management doesn't want to do anything that cost money.... Only options I see but have not tried: re-bind all Mac clients to the domain and configure machine auth with our CA Set up a SCEP server to hand out certs to perform machine auth since Macs are not domain-bound If any one has done something similar, could use some pointers.  ... View more

Re: In accurate Device type reported by Meraki

by Lia in Full-Stack & Network-Wide
‎12-05-2017 09:08 AM
‎12-05-2017 09:08 AM
ours is so screwy and it's gotten so bad...we tried to use the apply policy by device type feature in meraki. All hell broke loose because Meraki was flagging all our devices as iPhones....turned that crap off real quick. Flagging the device as inaccurate doesnt do anything. Reached out to Meraki they told us Meraki determines a deice type based on the HTTP GET request it sends to clients.   Asked what our options are to get this fixed since we're trying to block personal devices from our network. They just said to try and upgrade to the latest beta firmware because the feature "MAY" have been improved. Doesn't really inspire much confidence when the support isn't 100% sure what's what and asking you to run a beta firmware on production systems...but okay...i guess?? ... View more
Powered by Khoros
custom.footer.
  • Community Guidelines
  • Cisco Privacy
  • Khoros Privacy
  • Cookies
  • Terms of Use
© 2023 Meraki