Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About PawelG
PawelG
Building a reputation
Member since Jan 30, 2020
Feb 1 2024
Community Record
79
Posts
33
Kudos
1
Solution
Badges
Mar 22 2023
11:50 AM
I've just got reply from TAC. This feature is not supported currently - this means that in mixed networks there is no way to choose which traffic perspective dashboard shows. In case client is connected to MX and has some traffic with local devices overs switch You will see only "switch" perspective loosing internet traffic that does not hit switch ports.
... View more
Mar 8 2023
12:30 PM
I've opened the TAC case for that. I'll wait for their feedback. I think that client page always shows only one source of traffic data for every client. There is no functionality that aggregates what switch and MX see - it's only switch perspective or MX perspective (or MR perspective). In most cases they will be very similar, but in my case the are quite different. It's the dashboard logic that select which version to show (I guess) Br, Pawel
... View more
Mar 7 2023
9:21 AM
I have strange problem with one of my home network clients. It's TV 4K box, which is streaming TV channels via internet (UPC 4K Decoder). It's connected directly to MX75 appliance. On the default client list ("all") I can see the TV box but only with stats from switch - the traffic is minimal, as the TV box is not taking with any other devices in my network - it's probably just broadcasts etc. When I select "security appliance client" I can see the TV box from MX's perspective with some gigabytes of data (which is correct). The problem is, that when I click the client to get details (on both lists) I get the client page with only switch statistics. No way to get MX's perspective client details. Is there any way to force dashboard to show client details from MX perspective not the switch in combined network. I don't have that problem with numerous other clients in my network (connected to switch, but also to MX itself) BR, Pawel
... View more
Labels:
- Labels:
-
Other
It is disabled in my network. Other observation is that this IPv6 radius requests are associated with wpa3-802.1x requests. I think that WPA3 with 802.1x is not suppotred by Meraki radius but still the AP tries to contact radius server over IPv6. Br, Pawel
... View more
Aug 1 2022
5:12 AM
Im not using IPv6 on the network (no IPV6 configuration on uplink MX no IPv6 configuration in LAN). Still it seems that MR45's trying to reach IPv6 radius server when serving 802.1x WLAN clients: auth_mode='wpa3-802.1x' vlan_id='100' radius_proto='ipv6' radius_ip='fd0a:9b09:1f7:1:9a10:d693:9c81:f130' reason='eapol_timeout' radio='1' vap='3' channel='48' rssi='30' Is it expected behavior? Br, Pawel
... View more
Labels:
- Labels:
-
Other
Apr 7 2021
1:12 AM
1 Kudo
Good news. I would be really happy to test this FW in my home lab - which currently is my "production" environment due to all pandemic curcumstances. Still nice place to test new things. Br, Pawel.
... View more
Nov 5 2020
1:04 AM
1 Kudo
Hi, MR Firmware 27.5.11 marked as stable has been published in dashboard, but the 27.5.1 is still listed also as stable. There is no way to upgrade to 27.5.11 (MR45 network) - probably because other version is also marked as stable, or maybe this is FW only for new MR44 AP (not mentioned in release notes) Do You have similar situation? Br, Pawel.
... View more
Aug 25 2020
7:00 AM
The problems are not always clearly visible on devices (especially apple IOS devices). Im my case - the most frequent scenario is that iOS device tries to roam to closer AP, the authentication problem occurs - but iOS device does not pop any error message - it simply stays connected to old AP - which results in lower signal and speed. After some time it tries to roam again - in most cases successfully. So - the problem is visible only if authentication error occurs on first connection or after wifi in iOS device was disabled and then enabled. br, pawel.
... View more
Aug 14 2020
1:10 AM
1 Kudo
27.4 is out, the problem (with PSK) is still listed as known issue. Already applied on 2 networks with PSK auth and 802.1x auth - seeing "wrong password" or "client failed radius authentication" on both networks. So no changes here. Br Pawel.
... View more
Aug 13 2020
4:39 AM
It's not. It's even listed as know issue with 27.3. It says only about PSK authentications but I'm still seeing the problem with 802.1x Meraki Auth SSIDs. Still do not agree with "known issue" description - that those are false positives. Br, Pawel
... View more
Why? The bug has been fixed in 26.8.1 and You are running 26.6.1 Br, Pawel.
... View more
What firmware they are on? If You look at 26.8.1 bug fixes there is this one: AutoRF channel changes did not take effect on the 2.4 GHz radio (MR36/MR46/MR46E/MR56/MR76/MR86) Br, Pawel.
... View more
Jul 16 2020
11:43 AM
1 Kudo
Running 27.3 for 2 days. No single authentication failure message. In my case it was 802.1x not PSK. Br, Pawel.
... View more
Jul 7 2020
12:01 PM
1 Kudo
I've stopped talking with support about that issue as they clearly are not going to help. They are still denying problem being known and always ask for wireshark packet captures - which show nothing - as they are difficult to capture as problem is random. They probably know the problem, but it is difficult to solve - so better not to confirm it exists 😉 Or maybe we all have something wrong with our networks.... Br, Pawel.
... View more
Jun 23 2020
3:14 AM
1 Kudo
Wrong 🙂 It's still there in 27.2, just some time must have passed 🙂 I guess that Merki engineers are more busy with changing dashboard's rainbow logo for the 4th time that solving real bugs in their product... br, Pawel.
... View more
Jun 23 2020
2:28 AM
Very, very preliminary testing on 27.2 (released today): problem seems to be gone, but this is still much to small testing period to say something definite. Br, Pawel.
... View more
May 22 2020
11:01 PM
2 Kudos
Had a long discussion and debug session with TAC about this without any clear output. They state that those are not auth errors but interpretation of events by Wireless health - which are not related to authentication. I'm not convinced as sometimes my devices really pop-up a window saying that password is incorrect and requiring to type it again. Br, Pawel.
... View more
May 22 2020
1:33 PM
@antonis_sp - yep, it might be disassociation/association process not roaming. In my case - sometimes devices really pop-up a window saying that the password is wrong (PSK and 802.1x). Entering the old one always work... so I don't think that all of them are false-positives or it is just more complicated scenario. Br, Paw.
... View more
May 22 2020
12:57 PM
That is what TAC says, but I'm not convinced. In my case those errors happen when clients roam (not on every single roam) - and when they happen I can see clients roaming much slower or with trouble. TAC says that the authentication errors is a outcome of bad roam not the cause. I can see it only on iOS clients. Br, Pawel.
... View more
May 22 2020
12:44 PM
In my network the 27.1 did not solve the "bad password" problem. I'm still getting those on PSK network but also on 802.1x one as "authentication errors". (The same on 26.6.1, 26.7) I've been with TAC on it for a long time without any clear solution. They say those are not real authentication errors but rather interpretation of events by wireless health module. Br, Pawel.
... View more
May 21 2020
10:26 AM
Yep, I think its common problem on MR45/55/46/56 platforms. Br, Pawel.
... View more
May 21 2020
8:01 AM
Small update about MR45 bug that causes scanning radio to become unoperational after some period of operation time. With this release problem become more severe for 5GHz band - the scanning radio stops operating few hours after reboot while the 2,4Ghz still being operable. This bug causes AP not being able to show Meraki neighbours in local status page, broadcast neighbor information to clients and scan other AP on channels different than current operational channel. Br, Pawel.
... View more
May 20 2020
6:21 AM
Installed for test on small MR45 network. Can confirm that problem with not reporting latency on MR45 is solved. To be confirmed if thy solved the problem with hanging MR45 scanning radio (resulting in not shown Meraki peers in RF Spectrum and showing only foreigns on AP working channel) Unfortunately the problem with Failed PSK / 802.1x authentications it stil there. Br, Pawel.
... View more
May 11 2020
1:12 AM
1 Kudo
I've just looked at dashboard of another big network (I was not looking at it since I've encountered errors in my network) consisting of MR52's and using WPA2-PSK for its main SSID. 802.11r disabled and there is a LOT of authentication errors ("bad password"). So You are absolutely right 802.11r does not improve anything when using PSK. Called them and they say they have problems with their devices saying frequently there is bad password or they just disconnect when roaming. TAC still not seeing this problem. Br, Pawel.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 3619 | Aug 11 2020 2:52 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 4 | 20605 | |
| 2 | 3619 | |
| 2 | 43597 | |
| 2 | 18238 | |
| 1 | 18017 |
© 2024 Cisco Systems, Inc.
