Meraki

BHC_RESORTS · ‎Oct 5 2017

@american_nisei wrote: Sweet!!! THIS is very helpful indeed! No problem! Don't L7 block all online backup, as the "iCloud" rule blocks WiFi iMessage.

-Michael- · ‎Oct 5 2017

If you know when the IP change will happen you can preempt the change and update the switch beforehand. If you have no control or visibility of when this will happen, as Tat0rt0t say, you will need some sort of backup mechanism like a 4G dongle.

PhilipDAth · ‎Oct 4 2017

Another person reported an issue like this and it turned out to be the MX trying to repeatedly do a firmware upgrade and failing. Traffic to and from the MX to the Meraki cloud does not show up in the portal. If you are still experiencing issues with traffic usage have support check your unit is not attempt to upgrade itself and failing.

PhilipDAth · ‎Oct 4 2017

You wont be able to create a form asking for information using the built in on-box splash page system. You will need to use a server based splash page (Purple WiFi and Splash Access are two examples).

gparach · ‎Oct 4 2017

I have been using this method but was not completely convinced it was working. I tried another test and it seems to work from what I can tell. The only problem is it is an inconvenient way to enter many entries.

lpopejoy · ‎Oct 4 2017

Support did an audit all of my MX's (around 60 or so) and all of them were >= 12.24, except the one that I'm having this problem with. So that's good news. Additionally, engineering is saying this MX has a hardware issue and they are replacing it. I guess that's good news too.

PhilipDAth · ‎Oct 4 2017

If the clients are in a different AD you need to export your CA root public certificate. Then create a group policy in the AD that the clients belong to and add your CA public certificate to their trusted root authority certificate list.

PeterJames · ‎Oct 4 2017

@PhilipDAth I appreciate the wording is horrible, but for an EMM network if you go to 'Systems Manager > Summary', the report name is 'Network Summary'.

jlbaeza80 · ‎Oct 4 2017

Hi Phillip , thank you for the answer. Finally it was a problem in the Meraki public servers. It was the third point .... Dashboard is experiencing a temporary outage. Now everything is working. Thank you for your help

AlixJG · ‎Oct 3 2017

I'm sorry that I can't help, but I am following this thread since we are having the exact same issue, intermittently on some of our ipads. No Apple ID on the iPads themselves.

PhilipDAth · ‎Oct 2 2017

I wish there was a way to all the API from a "front end" page, rather than having to do it from a back end. It would be great if you could define a CORS domain in the API key section.

Dashboard_DJ · ‎Oct 2 2017

@Senan_Rogers 3rd-party VPN routes are not advertised into the AutoVPN route table and there is no way to do so unfortunately. A common workaround when you need to merge both AutoVPN and 3rd-party VPN route tables is to use two different MX appliances as hubs: 1. DC MX1, that's in your main org and terminates your Meraki AutoVPN domain. 2. DC MX2, which is in a dedicated org you create just for terminating 3rd-party VPN. Then on DC MX1, simply configure a static route for any of the remote, 3rd-pary VPN destinations with a next hop of the inside IP of MX2. The same can be done in reverse on MX2, with a default route pointing towards your MX1 or your DC core.

PeterJames · ‎Oct 2 2017

@PhilipDAth This got us.

PhilipDAth · ‎Oct 1 2017

I've never done it, but I don't see any issue with that. You could also use tags for this purpose (creating a tag per division) and assign those tags to the devices.

MRCUR · ‎Sep 30 2017

@PhilipDAth Agreed on the MS firmware, although I appreciate that beta firmware releases come pretty often for that line which is nice if you have the opportunity to reboot more often. I believe Meraki used to target quarterly stable releases, which obviously isn't really happening anymore. Most people I know using Meraki are on beta firmware now because of this, so it's turned into a sort of "Gmail" type beta (forever a beta).

american_nisei · ‎Sep 29 2017

Thanks everyone for their responses. I will give the Minimum BitRate a shot as soon as I get a maintenance window from the client. ~Doug

ww · ‎Sep 29 2017

Are you using DFS channels on the 5Ghz? > check your logging if DFS events happen on the radio 1.

MijanurRahman · ‎Sep 29 2017

Kudos for your post @PhilipDAth !

MijanurRahman · ‎Sep 29 2017

Hi, you should modify it from 'Splash Behavior' under 'Wireless > Splash Page'. Is it a RADIUS server you are redirecting to? Then the RADIUS server should define this URL, please check in their documentations.

jbhehoman · ‎Sep 28 2017

I've filled out the 'Make A Wish' for this same reason. I like the idea someone mentioned about using detect instead of prevent, but we have too many networks to do this manually each time.

WO · ‎Sep 28 2017

PhilipDAth, Just for the moment, i think that is inough with a website with help only to know how to design this kind of profile. Now, i configure in Group Policies firewall and traffic shaping, blocked website categories, blocked URL patterns and i block also YouTube for schools, but i think that is wrong. I bloking a lot of websites and manually, i mean, i have to add site per site, checking everytime the user movement on internet, so the objetive is NOT check any more. This users, have to access to Google to use e-mail Services.

Bluegrass · ‎Sep 27 2017

So is there a way to whitelist the app so even though it would be restricted on those setting it still would be allowed to install and be used?

felix_fx2 · ‎Sep 27 2017

in which i have no visibility for (Completed/Failed/Timeout), one of the caveats for Meraki MDM. I do have a case logged since ccleaner is shown in "program & features" but not the returned in the CLI which was used to capture. But this section is really cool..

Dutch9 · ‎Sep 27 2017

OH! Only applies to new users. HUM...ok. I will have to test that. There are employees using the 'employee' network and were 'caught' using dating websites. Management wants all dating sites blocked. I was using DNS host names, aka eharmony.com, match.com, farmersonly.com, etc. I didn't see a 'dating' category in the drop down list. DNS is being used on the DC.

Bluegrass · ‎Sep 26 2017

Thanks, I found the setting for Allow iCloud Photo Library (iOS 9+, macOS 10.12+) and it is greyed out. and checked by default. Apparently we have the free legacy version of Meraki and need to upgrade to control that feature. Then that probably explains why the photos are being pushed out. Allow Photostream is managed by us and it is unchecked.

About PhilipDAth

PhilipDAth

Philip D'Ath

Community Record

Badges