Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About EricI
Community Record
16
Posts
8
Kudos
0
Solutions
Badges
Jul 3 2024
7:30 AM
Thanks for the insight. Since paying customers also use 208.67.222.222 and 208.67.220.220 (for instance on an MX WAN interface), I presume those DNS requests that match an Umbrella network identity are allowed, and only those that do not match a network identity are denied/blocked?
... View more
Jul 3 2024
3:41 AM
Now I just learned that Umbrella / OpenDNS are not being blocked, but Cisco actually pulled the plug on their services in France rather than comply with the new ruling (??). While Cloudflare, Google and Quad9 (operated by IBM) comply (?) and therefore continue to operate their comparable DNS services. What a mess. 😅
... View more
Jul 3 2024
3:36 AM
2 Kudos
Thanks - the uplink DNS config is changed in the dashboard for this site so if the MX manages to connect using a fallback IP address of some kind it should possibly pick up the change. It has not happened yet though. We will force a restart and see if that helps.
... View more
Jul 3 2024
2:56 AM
I just learned that OpenVPN / Umbrella DNS servers are blocked in France on a national level following a court order. That creates a headache for one of our a local MXs that uses Umbrella DNS for the uplink - unfortunately the config only points to Umbrella primary and secondary servers and is effectively offline. We need manual intervention which is always fun on a remote site. I presume MX devices depend 100% on a DNS service being available to reach management servers and have no fallback option where they are able to pull config from a pre-defined IP address. So will Cisco launch an alternative for business customers now that Umbrella DNS is effectively dead both in France and Portugal? OpenDNS Service Not Available To Users In France and Portugal – OpenDNS
... View more
Jun 7 2024
2:48 AM
Thanks, but since this is known and commented in this article and on the status page I see no point in bothering support with this: Issue with claiming in Dashboard - The Meraki Community
... View more
Jun 7 2024
1:56 AM
So I just saw this and will focus on other stuff while this is sorted out: Meraki Status
... View more
Jun 7 2024
1:45 AM
The last 2 days I (and other admins) have received the same repeated e-mail warning (Scheduled maintenance for....) regarding scheduled MX firmware updates, just today we have 8 "waves" of the same e-mail warnings hitting all admins. This is more an annoyance, but we also discovered that we can not assign licenses to APs even though the scheduled Dashboard maintenance has been completed. Is this just hitting our part of Europe or is this a global problem=
... View more
Dec 23 2022
1:10 AM
3 Kudos
Same behaviour observed with CW9164 (no surprise) - got me confused for a while since there was no icon to "drag" when placing them in the floor plan 😄
... View more
Sep 7 2022
6:37 AM
Is anyone aware of the effect on the Office clients - do they recover after the failed download? Is the blocked update a Security or Feature update?
... View more
Sep 7 2022
6:05 AM
+us too - same file, same pattern, multiple international locations It would be good to know what Cisco TAC know about this - hopefully a false positive, and the alternative is not very promising.
... View more
Aug 11 2022
5:34 AM
Nope. No reports, no indications of anything similar to yesterday where all sites were affected and IPS events during the time frame increased from a normal of a few hundred to tens of thousands.
... View more
Aug 10 2022
5:06 AM
1 Kudo
-Our own clients access to our own services were affected - only desktop applications, browser access was fine. -No Endpoint security related issues are reported from our endpoint security stack. -No issues are reported from the Microsoft security services used. -Clients that pass through other IPS / Threat detection services than the Meraki / Snort combo report no similar issues.
... View more
Aug 10 2022
4:53 AM
Yes, same problem here causing massive problems for Microsoft desktop applications unable to login using TLS 1.2. We whitelisted the Snort rule (Sid 1-60381) and reported a false positive to snort.org
... View more
Sep 29 2020
11:06 PM
We adjusted the lease down to 4 hours but I see no benefit from this as the IP address conflicts continue into the next lease. I ended up limiting the number of recipients receiving the IP address conflict alerts and will keep it this way for the coming weeks until the majority of iOS users are on iOS 14.
... View more
Sep 23 2020
10:11 AM
Thanks for the suggestion. I will absolutely be adjusting lease times. After reading a bit more about this subject it seems Apple does not really change the MAC periodically but only switches from the physical MAC to the "Private" MAC when this function is enabled, then keep this private MAC associated to that particular SSID. I guess what I am seeing is rather a side effect of guest users upgrading to iOS 14 these days, having the private MAC function enabled after the first boot, causing the "IP address conflict" situation temporarily.
... View more
Sep 23 2020
9:10 AM
2 Kudos
In our guest network I have started seeing a side effect triggered by clients such as iOS 14 devices hat use MAC address randomization When a device is assigned a DHCP lease, then leaves the network to return later in the day within the address lease period, it tries to reconnect with a new MAC address at the same time re-using the previously leased IP address This causes an "IP address conflict" situation to be triggered and reported from the DHCP server on our MX - which I guess, theoretically is correct given the client behaviour. I know MAC address randomization can be disabled on corporate devices, but how to handle guests are another matter. One "solution" is of course to stop the reporting of IP address conflicts but sometimes this can be important to know about.
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 3 | 2644 | |
| 2 | 2138 | |
| 2 | 4631 | |
| 1 | 41957 |
© 2024 Cisco Systems, Inc.
