Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About IT_Magician
IT_Magician
Building a reputation
Member since Jan 20, 2020
Sep 4 2024
Community Record
85
Posts
30
Kudos
2
Solutions
Badges
Mar 4 2022
8:55 AM
Last night Meraki auto pushed 14.33 firmware to switches. Switches never came back but MX online. If we reboot MX switches come back for a bit, and then go down again. I had a user plugin from another port on MX into switch which brings it back up. It is almost like the switch is enabling spanning tree and blocking the uplink port. Before I roll back firmware does anyone have any quick fixes for this?
... View more
Jan 3 2022
3:16 PM
I really hope this saves everyone a bunch of time.... MX 100 -> AV SWITCH 01 -> AV Network Stack Basically when we put the Meraki's in HA it pulled traffic from the AV Network Stack switches over to the AV Switch 01. However the VRRP heartbeat packets work, it somehow is pulling that traffic to the rest of the network that it otherwise would not ever go. I confirmed this happened on two networks. I removed HA from both networks and the issue is now gone.
... View more
Dec 30 2021
9:11 AM
Hey Community, I need some help getting the Crestron DM-NVX to work. I know others have figured this out and I will link to other posts I have found. MX100 -> VLAN 2017 Trunk -> MS225 From the MS225: Port 3 = Crestron Server Port 48 = Down stream switch with other AV devices Current issue: Down stream devices on port 48 called NVX devices (they are Audio/video decoders) naturally do a lot of Multicast traffic. When those devices are online, it floods the VLAN 2017 and we get 99% packet loss on port 3 Crestron server. We had this working fine for the last year, and recently installed MX100's in HA, which required us to reboot things, and since then this issue started. It sounds like I need a layer 3 interface on the MS225 switch, specifically to enable IGMP snooping querier. Does anyone have info on how this would need to be setup? Do I just enter my info for VLAN 2017 in the image below, or is there more than that? Links I have found: 1. This is why I was thinking I need to enable IGMP snooping querier: dm_nvx_network_min_requirements (crestron.com) 2. This talks more about this: Solved: Multicast Basic's - The Meraki Community 3. Found this article specifically about Creston/Meraki issues from a year ago: Crestron DM-NVX Video Distribution - The Meraki Community Thanks,
... View more
Dec 13 2021
1:23 PM
1 Kudo
To confirm, if Meraki is showing this as being blocked, that does not mean the downstream device is vulnerable, correct? It just means someone was hitting the downstream device with a string which the MX is blocking?
... View more
Oct 18 2021
11:29 AM
Hey Community, We have a large OPP with an event center. They have a 1 million sq. ft. facility and sell meeting space where anyone can rent out the event center. The ISP provides them a 1000 public IPs. When a group comes and rents out the space, the existing firewall stack is handing out public IPs on the hard wired VLAN. These are still protected by the firewall because the ports are not open except ICMP for PING. So group A comes in, takes up a /24 block of public hard wired IPs. Then they deploy services for their show (lets say an onsite print server and 100 computers). If you do ipconfig /all on any device it is technically a public IP and everything works. What type of routing is this and is this even something Cisco Meraki can handle?
... View more
Sep 24 2021
10:09 AM
1 Kudo
Cables are all good, this is a brand new switch but we do have a second we can try. I find it strange only the WAP ports are flopping. Meraki does not log in the change log on dashboard when firmware upgrades were completed, so not 100% sure if firmware changed from auto-update but I cannot find an email. Issue is still happening, we are on hold with Meraki now but very frustrating. No way four cables are bad + cable at another customer location all at once. This feels like bad firmware. Meraki does show new firmware upgrades fix an issue with MS390 doing port flapping, but we have MS120.
... View more
Sep 21 2021
7:34 PM
1 Kudo
Hey Meraki Community, Two different customers over last week reporting WIFI issues. We check the WAP and Meraki, devices are not showing they have any issues. We then check the switch ports which the Meraki is connected to and find it flopping on and off. Event logs show STP change. Both clients have MS120 switches, but client one uses MR33 and client two MR46. All devices have been rebooted and firmware up to date. Any else having this issue? Find it strange this just started happening. Meraki wants us to go factory reset all devices and if it still keeps happening they will RMA. What a PITA.
... View more
May 24 2021
3:23 PM
We have a dental office with 8 wireless iPads. They worked flawlessly with the MR33 and due to the shortage we purchased MR44 to expand WIFI coverage. All iPads connecting to the MR44 drop connection. Pinging from the LAN, the device drops, but the WAP doesn't drop. This only affects clients accessing MR44. Our team spent 2 hours on the phone with Meraki. They are not sure why it is happening and will call us back. Posting this to see if anyone else has had this problem. We are hoping a beta firmware will fix this.
... View more
May 18 2021
9:27 AM
I appreciate your response, but that isn't the direction we are trying to go. I am on with Meraki support but they are also unsure at the moment. The question is, Meraki is saying these 293 MAC addresses are rogue because they were recently seen on LAN. But those clients are not on the client list. My gut says this isn't a security issue but I am not going back to my client with a feeling, I want to give them some facts.
... View more
May 18 2021
9:06 AM
@Inderdeep thank you for the response. What I am struggling to wrap my head around is, why are these showing up under the ROGUE SSID section with the reason "Rogue because recently seen on the LAN"? This reads that 294 devices on our LAN are broadcasting hidden SSIDs. Why not just move all of these SSIDs under the "Other SSIDs"? That is my specific question here, is this a security threat, and if it isn't a security threat, why does Meraki state these are rogue SSIDs because they were recently seen on the LAN?
... View more
May 18 2021
8:53 AM
Hey Meraki Community, I have a feeling there is a simple explanation here but want to ask the gurus. Customer asks me what the 293 hidden SSIDs are showing up under the Rogue. I checked and indeed Meraki states these are recently seen on the LAN. However none of the MAC addresses show up in the Meraki client list. I am calling Meraki support and doing a packet capture now to try and figure out what these are. Any have any idea? I checked other customers and it seems this is somewhat common, and even though we have it set to block rogue SSIDs these are showing up uncontained. Feels like they are mobile phones just doing stuff they probably always do but we never know.
... View more
May 9 2021
5:16 PM
We are using Cake POS. They are saying it could be a "phantom" network, which sounds like something they have experienced and that is what they call it internally. All other devices on the POS network is printers. None of them are having these issues.
... View more
May 9 2021
9:31 AM
Hey Gurus, Installed a new POS system for a client. 100% Meraki MX, switches, and wireless. All POS devices are hard plugged directly into the Meraki switch (home runs) on the POS VLAN. Customer called that POS terminals are having an issue. I login to Meraki and can ping all POS units with 0% packet loss, however when I check the event log I am seeing an IP Conflict. We reboot the POS units and the issue stops and the client IP conflict goes away. Randomly it starts again and the client IP conflict comes back, so I know for certain when client IP conflict happens the POS have issues. POS Things we have tried: - Removed dumb switch between Meraki & POS and ran dedicated home runs back to Meraki switch - Used DHCP reservations, then removed them - Turned off Meraki firewall IP Spoofing - Upgraded firmware of switch and MX - Ran cable tests on switch, confirmed no issues with drops I called the POS vendor who said they want us to install the Zyxel router that came with the system. Frustrated they are making us do that because system requires no porting forwarding and only needs a specific VLAN with DHCP that is all. We are doing that now but want to see if anyone has seen this before and if they were able to fix it.
... View more
Apr 22 2021
7:32 AM
3 Kudos
I know for years people have requested an affordable gigabit MX, so this is just another poke at Meraki. Gigabit is becoming a standard and we are seeing new fiber only ISPs offering symmetrical fiber gigabit internet for $250 a month. I am sure you have your reasons, but for your partners who 100% standardize on Meraki it forces us to bring on a different firewall to deliver affordable gigabit speeds to our clients. That brings more complexity into our business, cause now we have to train our technicians how to work two different firewall platforms, setup external monitoring to the non MX networks, and have different troubleshooting guides. Just something to think about, I know this topic comes up a lot but here we are getting another non MX firewall to stay within the budget of a customer while using Meraki switches and WAPs behind it.
... View more
Mar 12 2021
7:45 AM
1 Kudo
Hey Todd, We have not, just that one time. It makes things much easier to manage we enjoy using them.
... View more
Jan 9 2021
2:48 PM
Not sure on bug ID, but yes we opened ticket with support. At first they didn't know what it was, but a few minutes in other support reps started echoing our issue. Took about 6 hours but development team had to deploy a hotfix to the cloud tenant.
... View more
Jan 8 2021
6:20 PM
Thanks Meraki for a quick fix! Just in time, we are onsite doing an install.
... View more
Jan 8 2021
3:51 PM
Around 11am PST our customers with the network objects feature enabled went offline for about 10 minutes. Once back online under SD-WAN on both VLAN and firewall pages no longer work. Visually it shows all rules deleted but any rules set prior to this bug retained the settings and are still working. Both have MX84 with HA. Has anyone heard of when this bug will be fixed?
... View more
Dec 14 2020
11:57 AM
Thanks for sharing, I didn't think there would be a work around. We replaced their Fortigate and the IT team is used to everything being blocked by default and you allow what you want. The concern they have is it opens up for human error to forget to block a new VLAN because everything is allow.
... View more
Dec 14 2020
10:02 AM
Hey Gurus, So we have a customer that is pushing hard for implicit deny. We spoke with Meraki support and they said they do support implicit deny, however in practice it doesn't work. That is because in order for a VLAN to reach the WAN, they said the destination must be set to ANY. So really for a VLAN to reach WAN it needs ANY which means it talks to all VLANs, are we are no where close to implicit deny.
... View more
Nov 30 2020
1:49 PM
We use TP-Link switches on the edge.. non managed of course. This was after days of troubleshooting with Cisco Meraki support they finally said it wasn't supported. I suppose there are ways to do it, but at that point we found non-managed switches on the edge worked best for us.
... View more
Nov 30 2020
1:46 PM
1 Kudo
Check out my video on building high quality VoIP rules in the MX. Also in each MX, go to SD WAN & traffic shaping and add the public facing IP of your call manager server to check if packet loss is happening on the ISP WAN side. https://www.youtube.com/watch?v=G57e4oQsHaw
... View more
Nov 16 2020
9:37 AM
1 Kudo
No problem. Once you setup the SD-WAN settings, go to Google and search what is my IP and confirm it is on your new WAN connection. Once confirmed you are good to go.
... View more
Nov 16 2020
9:35 AM
1 Kudo
Both, setting it makes both upload and download go out WAN2
... View more
Nov 16 2020
9:28 AM
1 Kudo
Under SD-Wan and traffic shaping, set the network you want and set primary uplink as WAN 2 and it will work.
... View more
- « Previous
-
- 1
- 2
- Next »
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 733 | Nov 22 2023 9:28 AM | |
| 3131 | Jan 20 2020 4:02 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 4 | 1088 | |
| 3 | 733 | |
| 3 | 5393 | |
| 2 | 1881 | |
| 2 | 3654 |
© 2024 Cisco Systems, Inc.
