Meraki

PhilipDAth · ‎Sep 25 2017

I found this related thread. https://discussions.apple.com/thread/5601933?tstart=0

PhilipDAth · ‎Sep 25 2017

What are the issues you are having?

PhilipDAth · ‎Sep 25 2017

Here are some links to the relevant ISP pages for RBI. https://www.vodafone.co.nz/broadband/rural/ https://www.spark.co.nz/shop/internet/wirelessbroadband/ And before anyone asks - I don't work for an ISP and have no financial interest in promoting any particular ISP.

PhilipDAth · ‎Sep 25 2017

You should see if RBI is available at your site. For some sites that are a bit "rough" we sometimes deploy dual RBI circuits from different carriers (such as Spark and Vodafone). It is not uncommon for one to not perform that well - but unusual for two at the same time to have an issue. https://broadbandmap.nz/

PhilipDAth · ‎Sep 25 2017

The MX does not have a DSL port, so it can not do PPPoA. The best option is to use the ISP modem (or any standard DSL modem) configured in "normal" NAT mode, and giving out DHCP addresses on its LAN side. Then plug the MX WAN port into that router (where the MX wan port is configured for DHCP [the default]). I know it is using two devices - but this approach works best.

PhilipDAth · ‎Sep 25 2017

I note that the Cisco cable kit also has specific ARP filtering available. I wonder if your ISP uses this: https://www.cisco.com/c/en/us/td/docs/cable/cmts/feature/cblarpfl.html

PhilipDAth · ‎Sep 25 2017

Your static configuration is correctly aligned, no issues there. I found other people with other types of kit having the exactly the same issue. https://supportforums.adtran.com/thread/2021 So I think it is a common issue with this ISP. Perhaps we can solve this a different way. Why do you need a static IP on the MX unit? Why can't you use the DHCP assigned address?

PhilipDAth · ‎Sep 25 2017

There is clearly some issue with ARP happening. Lets check some basics. Could you give me the IP address, subnet mask and gateway on the WAN interface on one device with a problem. Please just put "x.x" for the first two octets to protect yourself. So change 1.2.3.4/255.255.255.252 to x.x.3.4/255.255.255.252/ Are the sites fed by fibre, or some other technology (such as bridged PPPoE)?

PhilipDAth · ‎Sep 25 2017

Check out this article: https://documentation.meraki.com/MR/Monitoring_and_Reporting/Bad_IP_Assignment_Configuration

PhilipDAth · ‎Sep 25 2017

First; is this happening on MX security appliances or some other Meraki device (and if so, what)? Assuming it is an MX how do you connect to the ISP? PPPoE? DHCP? Static IP?

PhilipDAth · ‎Sep 25 2017

All the hubs/spokes will have to re-establish the VPNs with the warm spare after a failover event. Warm spares do not have VPN state synchronised with them.

PhilipDAth · ‎Sep 25 2017

Remove the existing MX60 from the network, and then add the new MX84 to that same network.

PhilipDAth · ‎Sep 25 2017

Not to the best of my knowledge.

PhilipDAth · ‎Sep 25 2017

Can you control it via group policy?

PhilipDAth · ‎Sep 25 2017

I've only ever done it using Windows machines, which allows you to do it via group policy. If you are using PEAP/MSCHAPv2 and you use a public certificate on your RADIUS server (that matches its domain) then you don't need to deploy any certificates to devices,

PhilipDAth · ‎Sep 25 2017

If you think the information I supplies was helpful it would be great if you could give me some Kudos.

PhilipDAth · ‎Sep 24 2017

This might also do it (not tested by me): MsiExec.exe /uninstall{1827CDDB-1B8A-4A35-B365-60C1C8F79D0C}

PhilipDAth · ‎Sep 24 2017

For Windows go to Systems Manager/Command Line. Select all Windows machines. Now the bit I am not sure of. Try this: C:\Program Files\CCleaner\uninst.exe /S Failing that, try using "msiexec /u" and put in whatever package name CCleaner uses.

PhilipDAth · ‎Sep 24 2017

If you set the minimum bit rate to (say) 12Mb/s, clients will be forced to roam as their connection speed drops. They will then roam (typically) to the next AP with the strongest RSSI. By using this technique clients will always have a strong signal. When you limit the transmit power you are forcing clients to use a weak signal. Give it a try. I think it will work well for you.

PhilipDAth · ‎Sep 24 2017

Rather than limiting radio power configure a minimum connect speed. I would recommend 12 Mb/s. Then users will get a strong connection and roam when the connection slows.

PhilipDAth · ‎Sep 24 2017

You could also try plugging it into a different switch port.

PhilipDAth · ‎Sep 24 2017

Is the port that it plugs into configured for auto/auto?

PhilipDAth · ‎Sep 24 2017

I am running 24.8.

PhilipDAth · ‎Sep 24 2017

You can't disable the device to the best of my knowledge. You can generate an alert when someone leaves or enters a region. I have done this before for one of my customers. I put the whole country in a geo fence area so they know when someone leaves. Another trick is to put International airports in a geo fence area. If it is an iOS device and it is in supervised mode you can disable data roaming. You can do the same for Android devices that are in Device Owner mode. On an IOS device you could also enable "lost" mode.

PhilipDAth · ‎Sep 24 2017

I have not seen anything in Systems Manager that lets you deploy your own certificates. SCEP (Simple Certificate Enrollment Protocol) is a way for a device/person to easily request a certificate, have it approved in some way, and then deployed to the device. You would have to deploy your own PKI infrastructure to make this work.

About PhilipDAth

PhilipDAth

Philip D'Ath

Community Record

Badges