Meraki

PhilipDAth

What about the configuration guide? https://documentation.meraki.com/SASE_and_SD-WAN/MX/Integrations/Security_Service_Edge_Integrations/Cisco_Secure_Access_Meraki_SD-WAN_Configuration_Guide

PhilipDAth

>but it says this would also keep all the users online through the old MX, even though it is out of its Network. >Does this sound correct? That is not correct. The network will go down during the swap over. It has mistakenly referred to the process of adding a warm spare, but you are not adding an MX, you are replacing an MX.

PhilipDAth

I'd limit it to only be allowed to use the specific management VLAN required, either via an access port or a trunk allowed list.

PhilipDAth

I've noticed this as well. I find I need to find one of the APs, look at the order column, and then search on that order number to select all the newly added APs.

PhilipDAth

Caroline is in my thoughts.

PhilipDAth

Try waiting 24 hours and trying again. Weird bugs like this tend to get fixed without you having to do anything. Otherwise, as @alemabrahao says, you'll need to open a support case.

PhilipDAth

This is expected behaviour. You could add a CS switch in the future, so it needs some concept of which firmware version to use.

PhilipDAth

>If the spoke initially connected to the secondary, internal routing might shift after the primary comes up. Wouldn't this be desirable? You want to prefer the primary?

PhilipDAth

Also note that if you do use them, AirMarshall will see the 3802's as an attack. Make sure attack containment is disabled. https://documentation.meraki.com/Wireless/Operate_and_Maintain/User_Guides/Monitoring_and_Reporting/Air_Marshal#Containment

PhilipDAth

I got the impression you could ask Cisco AI, which uses prompts, but maybe this is what was meant.

PhilipDAth

@AmritN could you give us some sample prompts, and also mention the licencing requirements?

PhilipDAth

You have to do it exactly like you have. 🙂

PhilipDAth

How many networks are you trying to make this change to?

PhilipDAth

The AI Assistant won't do configuration changes. It will only guide you through making the changes. Yes, it can be done with the API.

PhilipDAth

I've seen this before when you have config related to the network. It's a bit vague in my mind now. Check to ensure that no NATs are configured in that network. Make sure AutoVPN is disabled. Delete/disable any DHCP config.

PhilipDAth

On a side note, assuming there is only a single (WiFi) link between the two switches and just a single VLAN is being connected, and even if the MS210 was the spanning tree root - traffic would not trombone to the switch root and back again. Spanning tree forms a loop-free network by blocking ports that would otherwise provide redundant paths. If traffic was being tromboned, it wouldn't be because of spanning tree. It would have to be because of something else in the network.

PhilipDAth

I've not seen any issues.

PhilipDAth

Have you added the switch to both your Meraki inventory and added it to a network in the Meraki dashboard?

PhilipDAth

Well done. They would have been tricky to figure out.

PhilipDAth

I never knew that was what it stood for. It sounds obvious on reflection.

PhilipDAth

Boom. This is a legendary answer. 🙂

PhilipDAth

I recall that some older cryptos were deprecated. Make sure you aren't using something old like DES, 3DES, SHA1, MD5, etc.

PhilipDAth

Please do ask this question in the Cisco Community - because this would make my life easier as well.

PhilipDAth

I haven't tried this, and I give you a 1% chance of success, but try: https://developer.cisco.com/meraki/api-v1/get-organization-clients-search/ It returns lots of information about clients in the network.

PhilipDAth

I think the video is very professional and well-made.

About PhilipDAth

PhilipDAth

Philip D'Ath

Community Record

Badges