About PhilipDAth

PhilipDAth

The MXs with integrated WiFi run as stand-alone access points, with their configuration orchestrated from the cloud.

PhilipDAth

You just need to include the client VPN subnet in the encryption domain. You could delay replacing the CSR1000v until all the legacy branches are replaced and then simply add a static route on that platform (for the client VPN subnet) and redistribute it into that VPN system.

PhilipDAth

If it is plugged into a Meraki switch you can use the cable test tool. https://documentation.meraki.com/MS/Monitoring_and_Reporting/Using_the_Cable_Test_Live_tool

PhilipDAth

If you really like Meraki you could also look at getting CMSS. https://www.cisco.com/c/en/us/training-events/training-certifications/certifications/meraki-solutions.html

PhilipDAth

Thanks for joining the community @Karberos .

PhilipDAth

>I noticed when I choose WAP3 on Meraki the 802.11r gets disabled and 802.11w changes to Required (reject unsupported clients). Also, it's not possible to change these options. That's because these features are mandatory in WPA3. My personal experience - I can' get WPA3 running reliably - like being able to stay connected for a whole working day. It keeps breaking. I would not personally roll out WPA3 to a client at this point in time. So much stuff doesn't work with it enabled.

PhilipDAth

If you turn the phone horizontally, so the screen is wider, does it make any difference?

PhilipDAth

I haven't tried doing NAT of Starlink. It's possible they don't allow inbound connections to be initiated.

PhilipDAth

I have personally used the CW9164, and would happily recommend them. They have been very solid for me.

PhilipDAth

I think I would ask the customer if they could stomach the cloud archive being non-functional for a month. Let them expire, and then do a single renewal. Plan B - I wonder if you get 30 days of grace, and the cloud archive might just continue working anyway ... Plan C - ask for a cloud archive trial licence. Use it for 30 days ...

PhilipDAth

I think you might be able to do this using the pre-paid billing option: https://documentation.meraki.com/MR/MR_Splash_Page/Configuring_a_Prepaid_Card_Billing_SSID You then enable the "fast" option, which removes all the billing stuff and just leaves you with the ability to generate access codes to give out. https://documentation.meraki.com/MR/MR_Splash_Page/Customizing_Splash_Pages_for_Fast_Prepaid_Card_Billing_SSIDs

PhilipDAth

I've never seen a 508 in years of light API use. 🙂

PhilipDAth · Re: Meraki Dashboard Outage today - 2023-09-20

I don't see any notified outages, but you can check here (and you can also subscribe to get sent pro-active outage notices): https://status.meraki.net/

PhilipDAth

If you were trying to use Meraki Catalyst monitoring, this is the list of supported devices: https://documentation.meraki.com/Cloud_Monitoring_for_Catalyst/Onboarding/Cloud_Monitoring_for_Catalyst_Onboarding_Guide#Eligible_Catalyst_Devices

PhilipDAth

Bonus point for having 8 Meraki tabs open. 🙂

PhilipDAth

That sounds like a bug to me. You'll need to raise a support case. Very annoying!

PhilipDAth

That should never have worked. I would expect you would need to loop through the output of getOrganizationInventoryDevices() and print out the serial number field of each device. Untested, but something more like: for device in dashboard.organizations.getOrganizationInventoryDevices(organization_id,total_pages='all'): print(device['serial'])

PhilipDAth

Do you have the public IP address of your backup connection directly on the MX, or is it sitting behind something doing NAT? If it is the NAT case, then they device has to also be configured to port forward to the MX WAN interface,

PhilipDAth

This could easily be the end user's Internet connection. It would be their WiFi connection. You don't mention the type of VPN you are using. If you are not using AutoVPN, could you buy a Z4 for one of the users? This will collect a lot of stats about the connection BETWEEN you, and also let you see the quality of the end users Internet circuit. Below is an example of the kind of statistics that can be reported on when doing this. Of interest is MOS - which is a measure of voice quality. You can also define performance classes when you do this.

PhilipDAth

Interesting finding. It sounds like the developers need to do some more work ...

PhilipDAth

There is no option to do this.

PhilipDAth

Are the cloud archive licences available with the "day" option? Maybe you could buy 30 days worth of additional licences, then renew everything at the same time.

PhilipDAth

Wow, that is messy. I don't think I want to sell cloud archive licences if this is the case.

PhilipDAth

Thanks for joining Isha. We'll be keen to draw on those 14 years of experience. 🙂

PhilipDAth

If you are referring to the user's password - no.

PhilipDAth

Philip D'Ath

Community Record

Badges