About PhilipDAth

PhilipDAth

If only a small number of people need this it will be easier to add the name to you local hosts file. c:\windows\system32\drivers\etc\hosts Do you know about these magic DNS entries? http://my.meraki.com/ http://switch.meraki.com/ There are a few more. They return you info about the Meraki device that you are connecting to.

PhilipDAth

You don't get firmware versions for a device, but for a network that the device is in. You'll need to use this API call. https://developer.cisco.com/meraki/api-v1/#!get-network-firmware-upgrades

PhilipDAth

@cmr is onto it. It's not complaining about a device per-see, but the firmware version of the network itself, regardless of whether it has any devices left in it or not.

PhilipDAth

I had to actually decommission IPv6 in some customer networks where we had already deployed it just to install Meraki. Horrible experience having to go backwards,

PhilipDAth

All of those options are wrong.

PhilipDAth

I don't think this is a good design. If you want to write a captive portal integration take a look at the EXCAP guide (option 3). https://meraki.cisco.com/lib/pdf/meraki_whitepaper_captive_portal.pdf Here is the developer guide: https://developer.cisco.com/meraki/captive-portal-api/ Otherwise, if you want to pursue the layer 2 strategy, you'll need to deploy an MX in VPN concentrator mode wherever your portal server is. Then configure the SSID to use tunnelling. https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/SSID_Tunneling_and_Layer_3_Roaming_-_VPN_Concentration_Configuration_Guide#SSID_Tunneling_to_an_MX_VPN_Concentrator

PhilipDAth

This is not probable but a cheap test - I'd try replacing the battery in one of the sensors and see if that makes any difference.

PhilipDAth

Thinking about this sideways, can you configure the name that MDNS sends from the client side?

PhilipDAth

What is an NB API?

PhilipDAth

I don't know. I have not tried that combination. The reason VPC peering does not work is that it wont route traffic for remote subnets - only subnets within AWS itself. Does the VGW support adding routes for remote subnets, or is it also limited to only advertising routes for directly connected networks in AWS as well?

PhilipDAth

What you need is to create a transit VPN. Put the VMXs into that. https://aws.amazon.com/blogs/aws/aws-solution-transit-vpc/ Don't use VPN peering directly out of a transit VPC. It won't work. You'll need to Transit Gateway in your transit VPC. Other VPCs can peer to that if you like. https://aws.amazon.com/transit-gateway/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc

PhilipDAth

I would not attempt to do that. It would have significant complexity, and that complexity is likely to cause more outages than would be saved by the additional redudndancy.

PhilipDAth

Is anything showing up under Airmarshall? Have you got any unusual settings like a high minimum connection speed (12Mb/s is a good choice)? What encryption settings are you using? WPA2-Enterprise mode?

PhilipDAth

A factory reset? really. This release should be blocked for MS390's give that.

PhilipDAth

What is ZTNA? Zero trust network architecture?

PhilipDAth

I agree with @BrandonS . You make your purchases via a Cisco Meraki partner, not direct from Cisco Meraki. So the sales rep is not really the right person. This is the Cisco Partner Locator to help you find someone close to you. https://locatr.cloudapps.cisco.com/WWChannels/LOCATR/openBasicSearch.do

PhilipDAth

>t he customer has a HA/ Warm standby configuration that seems to be creating a loop and I wanted to confirm if the supplied solution would work. I would single connect each MX. I would not connect each MX to two switches, or put a link between the MXs. This works really well. The official guides recommend dual connecting, but I don't do that. I've had more outages caused by the additional redundancy than what the additional redundancy saved. https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair#Recommended_Topologies

PhilipDAth

The better question to ask is when will they ship. 🙂

PhilipDAth

Some tips that will probably sort it out: Use an RF profile and force the use of 20Mhz channels. Set the minimum bit rate to 12Mb/s to stop users talking to APs too far away, and disable the use of legacy protocols that consume a lot of airtime. If you can, disable 2.4Ghz. You will get a bad experience because of the poor amount of bandwidth.

PhilipDAth

> Also, port 17 connected to the iMac is toggling between 100Mbps and 1Gbps. That is the "Energy Efficient Ethernet" standard at work. https://en.wikipedia.org/wiki/Energy-Efficient_Ethernet Devices supporting EEE will downshift to 100Mb/s to save energy when they are idle, or you are not working hard enough. 🙂 I don't use Macs, but there will probably be some power saving setting that lets you disable power saving for Ethernet (and then you'll be able to leave it on auto/auto).

PhilipDAth

As long as you are an admin of both orgs you can transfer a licence. https://documentation.meraki.com/General_Administration/Licensing/How_to_Request_a_License_Transfer

PhilipDAth

A good use case.

PhilipDAth

I haven't seen that. My initial thought is that it is crashing (which only Meraki support can confirm). HOWEVER, before opening a support case, I would bring the firmware up to date. It is probably a resolved issue.

PhilipDAth

What an interesting choice you have. Your service provider (Microsoft) is providing services to you out of a country you don't want anything to do with. I only see two choices. Stop using the Microsoft service Remove the geo-block.

PhilipDAth

Great answer by @ww . Another option with regard to the NAT rules - just add them now. They are only NAT rules so have no idea whether the address is correct or not. They just won't do anything until you configure the WAN interface with the new addressing.

PhilipDAth

Philip D'Ath

Community Record

Badges