Meraki

PhilipDAth · ‎Aug 20 2018

You'll need to contact the people you got the printer from for support.

PhilipDAth · ‎Aug 19 2018

Thanks for the thought. There won't be anything private about it. 🙂

PhilipDAth · ‎Aug 19 2018

Are we going to have a party at 00:00 ? @BlakeRichardson we are thinking about starting what I believe will be the world's first Meraki Users Group (MUG for short). If I had thought harder about it I would have tried to have it arranged for the 21st. Never mind.

PhilipDAth · ‎Aug 18 2018

I have never heard or seen valicert.com in conjunction with either Meraki - or anything else. Are you sure this is not being installed by some other application?

PhilipDAth · ‎Aug 17 2018

@m_Andrew what an excellent answer! It deserves more kudo's.

PhilipDAth · ‎Aug 17 2018

You can not have different NAT pools. As @AjitKumar noted you can direct traffic to a specific WAN interface - but this does require you to use two WAN/Internet circuits. Maybe you could consider using AutoVPN to wherever this other firewall is located, so that it can see the original IP addresses of the devices.

PhilipDAth · ‎Aug 17 2018

@Adam when I have seen this happen - I believe the MX65 gets into some kind of funny hardware state. When it gets into this state it affects both PoE ports. Usually it happens on some semi-regular time cycle (so the problem keeps coming back again and again). The dashboard does not show anything interesting when this happens. I have seen it happen to maybe 5 different MX65's now. I would call this kind of failure rate low, but its enough that when someone describes the same problem to me again I go "that one again".

PhilipDAth · ‎Aug 17 2018

@ww - actually you are right, that probably does work. You don't get this option if you are using either a template or don't have vlan mode enabled. I guess I have gotten used to disabling ports using the local status page because that works in all modes.

PhilipDAth · ‎Aug 17 2018

I have seen this happen before - and in each case it was a faulty MX65. It only happens on a small percentage of MX65's - but when you have one of the faulty MX65's it will happen repeatedly. I would raise a support ticket and ask for a hardware RMA.

PhilipDAth · ‎Aug 17 2018

Also note that you don't normally need to dedicate ports for VoIP phones. Usually on the Meraki switch you just specify the ports are access ports and define a voice vlan. If a phone gets plugged in it gets placed into the voice vlan automatically. If a PC is plugged into the back of the phone (assuming the phone also has a LAN port) the phones traffic gets placed into the voice vlan and the PC's traffic gets placed into the data vlan. And if you just plug in a PC it gets placed into the data vlan. https://documentation.meraki.com/MS/Port_and_VLAN_Configuration/Configuring_the_MS_Access_Switch_for_Standard_VoIP_deployments

PhilipDAth · ‎Aug 17 2018

You are correct - you can only disable a LAN port on an MX port via the local status page. You can access the local status page remotely by enabling this functionality. https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page#Controlling_Remote_Access_to_the_Local_Status_Page

PhilipDAth · ‎Aug 17 2018

@AjitKumar options are good. I think the option that most closely matches what you describe is what Meraki describe as layer 3 roaming. https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/Layer_3_Roaming Basically put half your APs in one VLAN and the other half in the second. Make the native VLAN the VLAN you want the user in on the switch port that the AP plugs into. Leave the VLAN ID blank in the bridging config for the SSID. Users will be spread across both VLANs but still able to roam.

PhilipDAth · ‎Aug 17 2018

If you look in the network list in the same view - do you see an funny network names?

PhilipDAth · ‎Aug 16 2018

Without IGMP snooping multicast traffic is flooded out all switch ports in the VLAN. "IGMP Snooping" is basically used within a VLAN to control which ports get which multicast streams. "IGMP Snooping Querier" or "IGMP Querier" allows for multicast traffic to be routed between layer 3 VLANs. https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Multicast_support

PhilipDAth · ‎Aug 16 2018

I have the forum manages to survive the surge in traffic!

PhilipDAth · ‎Aug 16 2018

There are no hits on your rule. Double check for any typo's in the IP addresses, and for any permit rules above the deny which might be permitting the traffic.

PhilipDAth · ‎Aug 16 2018

Any chance their is a permit rule above this that might be allowing it?

PhilipDAth · ‎Aug 15 2018

Is the Internet access it is using unrestricted?

PhilipDAth · ‎Aug 15 2018

You wont be able to put a public IP directly on a client and have them behind the MX. If the application wont work through NAT then you are short of options. Potentially you could look at plugging the client directly into the ISP router.

PhilipDAth · ‎Aug 15 2018

Meraki use Brightcloud. I'm not sure who Umbrella use. It is possible Meraki might use Umbrella in the future ... who knows.

PhilipDAth · ‎Aug 15 2018

Disable 2.4Ghz on the SSID. Only use the 5Ghz spectrum.

PhilipDAth · ‎Aug 14 2018

You won't be able to put a public IP address directly on the 2960-X's, but you could NAT through to them. But as @AjitKumar say, I'm not sure why you would want to put a public IP address on them. If you want to provide remote access you could just use client VPN to the MX.

PhilipDAth · ‎Aug 13 2018

Do you have a voice VLAN defined on the HP switch - perhaps it is getting confused. Any firmware updates for your HP switches?

PhilipDAth · ‎Aug 12 2018

How do you find the MAC address for a VPN client?

PhilipDAth · ‎Aug 10 2018

Anything appear in the HP switch logs?

About PhilipDAth

PhilipDAth

Philip D'Ath

Community Record

Badges