Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Einstein
Einstein
Getting noticed
Member since Nov 14, 2019
Nov 27 2023
Kudos given to
Community Record
35
Posts
5
Kudos
1
Solution
Badges
Nov 27 2023
6:53 AM
Layer 2 would take me an hour to edit out all names...etc. Plus I would need to put it into 3 screen shots. If you want it I'll make it happen, will just take me awhile...lol I don't think this is an accurate L3 picture, as per this topic. Thank you alemabrahao!
... View more
Nov 27 2023
6:38 AM
Running full Meraki infrastructure. When initially set up, "Routed Mode" was chosen by the company that set it up (5 years ago). We have had reporting issues ever since, but I am able to figure out what was actually happening. Now it seems things are getting worse, to the point I cannot figure out routing for some devices. I have routing for some devices showing as going to other buildings (6-7 hops sometimes) on our campus even though they should only have 1 hop to our core stack. I am told to switch to unique client identifier (I have been down this path before). Things I am concerned about. I will lose years of logging...etc. Not sure if this something I need to worry about, but when you hear your losing years of logs.....well ya know 8-). We are running current firmware. I have read some folks have internet speed issues when "Unique client Identifier" is used. Unique client identifier is still listed as "Beta" which concerns me. It has been listed as Beta for over 6 years now. Has me a little concerned. Just wanted the community's thoughts on this. Should I switch y/n?
... View more
Jun 9 2023
9:05 AM
I have not. The community is always my first goto 😉 The repeater is working for one of my SSID's, so I know it's halfway?.....working.....lol I will open a case and post what I find. Thank you everyone again!!!
... View more
Jun 9 2023
6:23 AM
Nothing telling that I can see in the log file (I can see results from all other AP's). Since the repeater has no IP address, it is not even tested by Meraki when I run a manual RADIUS test. All other AP's are seen, and pass. When I try to connect to the repeater with my laptop, the connection sits at "Trying to authenticate". If the auth happens on the gateway, traffic does not seem to be getting forwarded from the repeater to the gateway for this. Since the traffic never gets to the gateway, it never makes it to the RADIUS server, hence nothing in the log. Just more info, we also have an open SSID on this repeater that works fine. I am 1 firmware ver behind. Maybe next week I will rev the AP's to the newest firmware. I will read up on new firmware over the weekend. Thanx again everyone!
... View more
Jun 8 2023
11:05 AM
Gateway auth is working, but when I run the RADIUS test through Meraki, it sees the repeater and fails it. Just trying to see if there was a way to either verify the AP through RADIUS, or just clear the error. Thank you
... View more
Jun 8 2023
10:32 AM
Gateway AP succeeds at RADIUS test, but not meshed repeater. Since the repeater has no IP address, how do I add it to RADIUS list? DNS name does not work either. Cannot seem to find anything on this. Thank you all in advance.
... View more
Would love to, ripping up 100yards of parking lot is not in the budget 😉 Just a single hop, should be ok.
... View more
Exactly what I was hoping to hear. Strange I could not find this simple answer/explanation anywhere in Meraki docs hence my hesitation. Very possible I missed it? Thank you very much my friend I appreciate the quick, concise answer, you rock 8-)
... View more
Jun 6 2023
7:56 AM
Our current 4 year old wireless network has had MESH disabled. We have now installed 2 - MR76's with external ant-23 antenna with the purpose of getting wireless to another building. From what I can see, the ONLY way to do this is to enable MESH to ALL AP's not just the 2, MR76's that will be making this connection. I do not want to simply tick a button that could instantly change our entire wireless network which has been working perfectly for many years. When I see that bandwidth can be affected by 50% !!!, I pump the brakes. Could I get some input on this before I proceed. I have read most of the notes from Meraki: Wireless Mesh Networking - Cisco Meraki Using a Cisco Meraki Access Point as a Mesh Repeater - Cisco Meraki Mesh Deployment Guide - Cisco Meraki Extending the LAN with a Wireless Mesh Link - Cisco Meraki but still have many unanswered questions. Thank you all in advance, I really appreciate all the input.
... View more
Sep 7 2022
5:49 AM
Same......seems to be "Spreading" over our network as clients come online this morning......good times.....good times... Update: Found this in our Defender logs at same time of alert from Meraki.
... View more
Oct 27 2021
11:06 AM
Ok ty. Looking over past couple months, they were updating almost daily, at the most every 3 days, so not seeing an update for almost 3 weeks gave me pause. Tyvm!!
... View more
Oct 27 2021
7:05 AM
I just noticed our SNORT rules have not been updated since Oct 6, they were updating almost daily before (I can see in the query). I did an event log search by "Intrusion Detection Rules Update", for our security appliances latest update listed is Oct 6. Could the query just be incorrect? As you can guess this makes me queasy. Thank you in advance, I can always count on you folks😀
... View more
Dec 11 2020
8:03 AM
Just had same thing happen again. Every single piece of Meraki gear we have is reporting to have gone offline for 1 (one) second this morning. Again, no internet issues, no power events. I have submitted a ticket to Meraki as this is the second time in a week we have had every single piece of Meraki equipment report as going offline. No IDS events. No updates scheduled. I am thinking it is a false positive, maybe a glitch in The Matrix.
... View more
Dec 8 2020
3:32 AM
Received this IDS twice yesterday at 11:22pm. At 12:55am every piece of Meraki gear we have went offline (over 150 items) for almost an hour. This IDS was allowed, when I try to look it up it says no SNORT rules are available for this event. Everything came back up, but its all very suspicious. I am combing through logs. We have redundant internet connections, Neither are showing as going down. I had no upgrades scheduled. Anyone else experience major outage last night right after midnight, and does anyone know what "BO_CLIENT_TRAFFIC_DETECT" is? Thank you everyone in advance.
... View more
Oct 20 2020
8:16 AM
Since upgrading to switch firmware 12.28 (MS210-48fp), our switch stack is just creating pages and pages and pages of MAC Flapping logs. All reported devices are AP's, some (most) have 0 (zero) clients associated with them as we currently have limited staff. Our AP's are set in bridge mode, we have 2 SSID's. I am concerned of high CPU usage on the switches (sure would be nice if we could see this) as the switches are creating these logs at an alarming rate, hundreds of pages, almost a page a minute. I would say 95% are on the switch the AP's are connected to. I have 2 questions....need I worry?.....Is the new firmware to blame as we had 0 (zero) of these errors prior, should I just revert? Thank you all in advance, I always appreciate the feedback I receive here.
... View more
Jul 6 2020
5:38 PM
Ty Phillip. Very detailed answer, I really appreciate it. Only mystery, is I set this network up, and have never added any rules, so I am still a little confused as to how? I do believe these all showed up after I installed the latest firmware on Sunday night. I agree with your SQL references , and these fixes are in the works. If I add something to be whitelisted, where does it show up? For example, I highlighted one of the D-Link signatures as a whitelist since we have no D-Link equipment, but could not see it anywhere as "added" to the whitelist, all it did was create another entire rule set, full of all the previous signatures. So now I have 3 "rules" each with 40 or so entries, some are identical, and really have no idea if this D-Link signature was indeed whitelisted? I am still very hazy on how, or where to see what is really added as whitelisted? Thank you for educating with me on this. I just want to make absolutely sure none of this is actually "whitelisted" as that would be horrifying.
... View more
Jul 6 2020
2:50 PM
I just counted, under each "rule" there are almost 40 individual items, I just took a quick screen shot to give everyone an idea of what was there. But they vary greatly. So are you saying all the things in these lists are not really in effect, they are just things that have been tripped? Very confusing to say the least if this is the case. So if I just click on one of the items in these "lists" that will then whitelist that particular item? Again just confusing I have 2 items under "Rule", with 40 sub items under each one of them. When I click "whitelist an IDS rule" I get another "Rule" with 40 or so different sub items. Even when I click one of the sub items, nothing happens. I do not see that particular item listed, or added anywhere. What am I missing?..This is what the doc says: You can whitelist specific SNORT® signatures by clicking Whitelist an IDS rule. Any signatures for which matching traffic has been seen by the appliance will appear in the Select an Option drop-down so that you can select which signature or signatures you wish to whitelist. So why do I have 2 "Rules"? maximum number of signatures in a rule? When I do click an item to whitelist I do not see it listed anywhere as being whitelisted? If I do delete both of these "rules". As the appliance starts to see attacks, will it just re-build the list again? Sorry I just find it confusing the way it is presented. Thank you again, really appreciate your time!
... View more
Jul 6 2020
11:40 AM
I thought very odd as well. Change log empty after firmware update. I am a little worried as I have several Malware Backdoor entries now set as whitelisted. I have 2 entries under IDS, with each entry having over a dozen now whitelisted items. I went back pretty far in my change log just to make sure it was not something I missed weeks ago but see nothing. At this point I am going to delete these entries, but I still would love to know how they were entered, and by whom. Here is just a very small screen shot of just a couple of the entries. Are these just the rules Meraki generates, and are now just made visible? I have 2 rules listed, both have different entries. Again, maybe this is just the default Meraki rule-sets. I just never have noticed them visually listed before under intrusion detection. If it is a Meraki default whitelist, I can hardly believe they would have malware-backdoor whitelisted......lol. Thank you for your response, I
... View more
Jul 6 2020
6:46 AM
Just updated MX250 to newest firmware last night. Now I have at least 20 items listed under IDS whitelist rules? I have nothing whitelisted, and have no idea how Meraki can just arbitrarily add whitelist rules? There are 2 entries, with at least 10 items listed under each entry. Some to me have absolutely no reason to be whitelisted. Many are SQL related. My first reaction is to remove them all, but I never like to perform knee jerk reactions to things I have little information about. Anyone else see these same types of behavior after the last firmware MX250 firmware upgrade? Some entries are liosted as Malware Backdoor? Why would Meraki whitelist these types of things?
... View more
May 7 2020
5:37 AM
Well I found a way around it, but its clunky. When I put an individual camera up, I need to click in the area of the picture. I am then presented with a menu, with a selection of "controls". Once I click that I get the option to then go to full screen. So it works, but takes a couple clicks to get there. Not the end of the world, but not ideal. fyi Everything is 16:9, 3840 X 2160. So its not a full 4096. Maybe that is the issue. The TV's are commercial Hisense, model 65U1600. Thank You!
... View more
May 6 2020
7:30 AM
On 4k LED TV's. The video wall fills the entire screen, but when you select a single camera, and click full screen, it only fills a very small portion, maybe as little as 30% of the entire screen. Works fine and as intended on separate Dell 24" and 27" monitors? I have replicated this on all 4 of our security stations that have the 4K external TV connected via HDMI 1.4 cables. I have searched the forums but cannot find anyone else having this issue. I have checked drivers on all 4 stations. 2 laptops, 2 desktops. All 4 support 4K resolutions. Video cards run the gambit from Intel, ATI, and Nvidia. This is an important feature that we want to find a fix for. I know the cameras only do 1080p, and have tried to lower the resolutions down on all these stations to 1080p down from 4k, but it did not change the output, still just a small portion of the LED TV. We run over 40 cameras, all other features work well. Thank you all in advance.
... View more
Apr 30 2020
9:27 AM
Me as well! I do not have any Draytek equipment. I do not know why these are marked as "allowed". Would like to just see "Blocked".
... View more
Dec 9 2019
12:51 PM
So since my current setting show one of my IDF's as root, should I just set my current stack to 8192. That way my main switch stack would always be root, but don't worry about individual switches in the stack. Sorry that sounds confusing....
... View more
Dec 9 2019
7:43 AM
So is RSTP not a concern, or having a root switch not a concern when configured as a stack? Now I have other questions...
... View more
Dec 9 2019
7:42 AM
Just because we have our VM farm plugged into it. Just figured we would make it root switch. But know seeing as it is a stack, I wonder how important having a root switch is. I also tried to make sure it was the switch booted first. We recently went through a massive power outage which blew out one of our large APC units. I booted switch #1 first again, but troubleshooting this latency is when I noticed the RSTP error.
... View more
Kudos given to
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 7804 | Nov 15 2019 5:03 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 5 | 7804 |
© 2024 Cisco Systems, Inc.
