Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About NJNetworkGuy100
NJNetworkGuy100
Getting noticed
Member since Apr 2, 2020
yesterday
Community Record
71
Posts
38
Kudos
3
Solutions
Badges
Jan 17 2023
6:53 AM
I hope this year to finally get that CCNA I've kept putting off. Then hopefully quickly follow up with the Meraki certification... I'm also hoping to take my Python API scripting up to another level....daily backups of settings/configs across all networks in multiple orgs, checking for standard configs on networks across an org, single script to setup new networks and devices....
... View more
Nov 16 2022
11:50 AM
Meraki Support told me the same thing...impossible to do that kind of routing with a simple Hub-Spoke setup. Yeah, I have a few solutions brewing. The remote MX in the offsite network (if they would even allow that), setup a limited number of Spoke networks as Peers to the same IPSec tunnel, or setup the tunnel on another router or MX on the same LAN subnet as the Hub MX and use static routes to advertise it.
... View more
Nov 15 2022
2:23 PM
2 Kudos
So, basically, another device like an ASA has to be doing the IPSec tunnel, and then a static route on the Hub MX would be then be advertised in the Auto VPN? Could it be another MX in VPN Concentrator mode?
... View more
Nov 15 2022
1:57 PM
Question about third party VPN remote subnet availability.... My org is a hub-spoke setup....the data center is the hub for the Auto-VPN setup, and all the branch offices are the spokes. We do split tunnel on the Auto VPN, so only those advertised subnets on the Auto VPN go over the S2S VPN, and clients use the local internet connection for everything else. We are setting up a third party IPSec VPN to an offsite network that is hosting some servers. We are going to peer the Hub MX in the data center to this IPSec tunnel. The clients in the various Spoke networks will need access to the servers being hosted on the remote side of this IPSec tunnel. Question...how do we advertise the remote network's subnet to the Spoke networks over the Auto VPN, so that clients in the Spoke networks can connect to the servers in the remote network on the other side of the IPSec VPN tunnel? Is that possible with only the Hub MX peering this connection?
... View more
Labels:
- Labels:
-
3rd Party VPN
-
Auto VPN
Nov 8 2022
6:23 AM
We are looking at different naming styles, and, like you, we are thinking of moving away from the names with "two digit codes" buried in them, that only make sense if you know what you are looking at. We are also looking at making the device names much more readable and descriptive. It isn't like there is a real limit on the length of the name, and we are looking at where we'd use the names and who would need to read the names of the devices. I'm thinking of all the various email alerts and dashboard pages that show the description of the device (wireless health reports, client connection pages, drop-down menus, etc...).
... View more
Nov 7 2022
7:18 AM
We are looking into standardizing our device names (MS, MR, MX, switch stacks) across our global orgs.... Asking for any advice or examples folks can give me.... Each Meraki network is a physical location....outside of NA, we might have networks in multiple cities in a country, and in NA, we might have networks in multiple cities in a state (sometimes multiple offices in a single large city). I'm thinking we should be descriptive in naming each device, for readability purposes when looking for a device in drop-downs or reports in the Dashboard and for networks with a large number of devices. How do you all name your devices? And how do you use Device Tags and the Device Notes field to add additional info that isn't in the name of the device? What do you all think? Examples and any advice would be very helpful.
... View more
Oct 11 2022
11:47 AM
Thanks...the documentation doesn't specify the WAN interfaces, which is why I was a bit confused....MX Firewall Settings - Cisco Meraki Just trying to get some clarity while we update our network setting standards.
... View more
Oct 11 2022
10:49 AM
Is this setting for only allowing certain public IPs to ping the MX through the WAN, or does this setting control internal LAN IPs that can ping the MX as well, like those local to the network or over the S2S VPN?
... View more
May 23 2022
5:22 AM
For my purposes right now, Network tags. But, according to that link above, there should be this: Organization > Configure > Manage Tags But I don't see that in my Dashboard. And I don't see how I can delete a network Tag that is no longer used.
... View more
May 20 2022
5:42 AM
Is there a place where I can delete old, unused Tags in the Dashboard? I think the first sentence from this page is out of date: https://documentation.meraki.com/General_Administration/Organizations_and_Networks/Organization_Menu/Manage_Tags
... View more
May 5 2022
6:41 AM
Oh, that's a great MS doc...thanks for that link. Something to discuss with my company's O365 guys to see if they even knew about this for Teams.
... View more
May 4 2022
6:12 AM
2 Kudos
You could just create a Deny L3 Firewall rule for that VLAN in the MX's firewall and block the VLAN's subnet from all traffic to the IP's listed in this site: https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide Teams seems to use these IP ranges: 13.107.64.0/18, 52.112.0.0/14, 52.120.0.0/14, 52.238.119.141/32, 52.244.160.207/32
... View more
May 4 2022
6:05 AM
2 Kudos
I just looked this up, and for some reason, Teams is a category to use in Layer 7 Deny rules in the MX firewall settings (under VoIP/VideoConferencing), but isn't an option when updating a Group Policy object. Very odd. https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide This is the page that lists all of the FQDN and IP's used for O365 services, including Teams. You can use Group Policy to block the IP ranges for Teams. In your Group Policy Object, I would suggest testing a Custom Layer 7 Deny rule that blocks traffic to the Remote IP ranges needed for Teams use. These seem to be the IP ranges needed for Teams use: 13.107.64.0/18, 52.112.0.0/14, 52.120.0.0/14, 52.238.119.141/32, 52.244.160.207/32, Hope this helps...
... View more
May 3 2022
12:14 PM
So, we've upgraded all our MXs in NA to 16.16 and we've also migrated our phone system to MS Teams Voice. So, with no internal phone system going over the site to site VPN and MS Teams is now a category for things like Traffic Shaping (finally!), we've decided to review and update our SD-WAN settings on the branch office MXs. We operate the Auto VPN with all our branch office MXs as Spokes, and two datacenters as Hubs. Couple of questions and maybe some advice... We noticed a few new categories that we could use for VPN Uplink Policy....does anyone know what network traffic the "Active Directory" category under "Productivity" covers? And does anyone have advice or tips for Traffic Shaping? Is there traffic that you typically have bandwidth caps on it? Like, background traffic on phones or video streaming. Any best practices docs, official or otherwise, that are available online? Any good blog posts that you know of? Bring on the advice and tips and whatever!
... View more
Feb 23 2022
6:10 AM
1 Kudo
Tip1: Tags and API's are your friends for doing some amazing things. For example, I wrote a script that checks all Meraki devices in all networks in an organization. If the script sees the device tag of "reboot-daily" on a device, then the "rebootDevice" API call is made on that device. I have that script scheduled to run every night. All any of the admins in my company have to do is add that tag to any device they need rebooting that night, and it will automatically be found by the script and rebooted. Then the admin can remove the tag the next day if they want. Using tags and the API, the Meraki devices now have the functionality of scheduled reboots! Tip2: Learn Python! It is fairly easy to learn, the Meraki API works very well with it, and you can easily create reusable code for things like outputting to a spreadsheet or sending an email. You'll eventually be able to quickly create a script that outputs client usage from multiple networks, or backup firewall settings from multiple networks, or outputs MX firewall settings to a spreadsheet to show security auditors, or check settings in all networks and orgs for custom MX settings and output those settings to a spreadsheet....the list goes on and on. Azure KeyVault has a module (written by Microsoft) for Python. azure-keyvault · PyPI Great place to store API keys! More info here: Authenticate to Azure from Python | Thomas Stringer (trstringer.com)
... View more
Oct 11 2021
12:40 PM
3 Kudos
This is the scenario I'm in now. We just standardized all MX's worldwide with standard L3 Firewall rules on all VLANs (thanks Python and the API!), but now we have a Deny All rule as the rule above the Allow All built-in rule. I would love it if I could quickly see what is being blocked by this Deny All rule right in the dashboard, or even via an API script that I could pump to an Excel spreadsheet. Now I have to start a new project to find and configure a Syslog server to monitor blocked traffic whenever someone claims to have an issue with the firewall.
... View more
Sep 27 2021
1:47 PM
2 Kudos
Does anyone else wish for a small (8 to 12 port) Layer 3 switch from Meraki? There are some future setups that we'd love to try out for job sites with multiple trailers and yards with multiple small buildings, where running cables between buildings isn't feasible, and we'd like to use MR's as mesh repeaters to extend the LAN wirelessly. I hate the idea of having to spend a ton of money on a 24 port L3 switch to hook up MR's internally in the remote building to provide good wifi to all corners of the building or hook up some internal IoT devices.
... View more
Aug 11 2021
8:26 AM
2 Kudos
My planter is finally showing some sprouts from the included seeds!
... View more
Aug 11 2021
8:20 AM
https://developer.cisco.com/meraki/api-v1/#!get-device-management-interface You just need to know the serial number of the device...which you get a couple of different ways... https://developer.cisco.com/meraki/api-v1/#!get-network-devices or https://developer.cisco.com/meraki/api-v1/#!get-organization-devices You can search the model or a device tag to look for the AP's.
... View more
Jun 29 2021
10:50 AM
4 Kudos
I have a new avatar! OH YEAH!!!!
... View more
Jun 25 2021
6:04 AM
Are you adding the parameter total_pages='all' if you are using Python and v1 of the API? Click on "Templates" on that link you posted and look at the Meraki Python Library example. Here is some info on Pages and the API: Pagination - Meraki-Dashboard-API-v1-Documentation - Document - Cisco DevNet
... View more
Jun 21 2021
6:51 AM
https://developer.cisco.com/meraki/api-v1/#!reboot-device There is a Meraki Python API call now for rebooting an individual device. You just need the device's serial number. We wrote a quick script using this API call to do an overnight reboot of our MG devices every weekend. We were finding if we didn't do a weekly reboot on some of the MG's, they'd need manual power cycles (popping the power on the PoE adapter) every couple of weeks after they randomly would drop offline.
... View more
Jun 21 2021
6:28 AM
https://developer.cisco.com/meraki/api-v1/#!get-organization-devices-statuses Status and LastReportedAt are fields in this API call. It is in the Organizations section.
... View more
- « Previous
-
- 1
- 2
- Next »
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 617 | Oct 31 2024 9:01 AM | |
| 6812 | May 4 2022 6:12 AM | |
| 4516 | Jun 21 2021 6:28 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 6 | 13652 | |
| 4 | 5103 | |
| 4 | 40287 | |
| 3 | 25224 | |
| 2 | 617 |
© 2025 Cisco Systems, Inc.
