Meraki

RomanMD · ‎Jul 12 2022

IP band? Or IP subnet? Are you looking for the IP subnet on the WAN interface or the IP subnets configured as L3 on the MXes (Addresses and VLANs) or maybe on L3 switches? If is one of the above, the information can be easily extracted by leveraging APIs.

RomanMD · ‎Jul 1 2022

Any static routes configured on the switch which might send the traffic to other destination instead to the ISP? Maybe the traffic is going via your internal network where you have an inline proxy/fw that decrypts the traffic? On the other hand, I can confirm that there was a problem with MX250 which could not connect to the dashboard. This could be solved only after updating the MX to the latest version using copper SFP instead of 1GB FO SFP.

RomanMD · ‎Jul 1 2022

Meraki switches are meant to be managed from the cloud. What you are referring to, most probably is the meraki-cli python module that is emulated kind of CLI interface. But that module is making use of Meraki API - and there is no api endpoint for your request. However, your request is easily done with a script and you will not have to copy/paste anything.

RomanMD · ‎Jun 30 2022

Hi @DarrenOC. Of course I have, but wanted to cross-check him! 🤣

RomanMD · ‎Jun 30 2022

Hi, we all know about the new AP models released by Cisco/Meraki which supports dual persona, so we can choose to have them WLC managed or Meraki Cloud managed. But those are new models and more expensive. Does somebody have any information - is there any plan to support Meraki Cloud Management on old Cisco 9k APs? C9115, C9120, C9130? Thanks

RomanMD · ‎Jun 27 2022

I'll second Brandon's opinion. One more thing that I've observed over the time - the old Cisco phones did not like to be plugged into PoE and have also the external power adapter. Other than that, the wiring guys may buy a PoE tester, they're absolutely not cheap... but may identify problems without killing just another phone...

RomanMD · ‎Jun 22 2022

It is reporting as Repeater because it cannot obtain a lease, not vice-versa. According to documentation: The AP only converts to a repeater when one of the following is true: The AP cannot receive an ARP reply packet from the default gateway on the LAN which is usually a local firewall or router The AP is unable to obtain a valid IP address via DHCP The most common problem: check the cabling.

RomanMD · ‎Jun 22 2022

The device doesn't rely on the snmp information. Snmp is another way to expose some information from the switch. So the OID's may or may not be implemented.

RomanMD · ‎Jun 22 2022

Yes! It works the same it just requires more steps. You need to de-attach the license from the broken switch and assign it to the other switch which will be replaced. You can do this even after replacement since you have 30days grace period. So, you don't require to assign the license before replacing it.

RomanMD · ‎Jun 21 2022

You should start on the documentation page. The switches should be configured in the traditional way and operational. So you should be familiar on how to configure them. Few pre-requisite must be met before being able to enable the switches for Meraki monitoring. Don't go with Meraki management yet, since this is not yet publicly supported. The process to add the switches to dashboard is straight forward without the need to execute CLI on the catalyst, the app will do everything, however if it will not work - the troubleshooting requires you again to interact with the CLI. Good thing about catalyst is that they have console - so the client can connect them to console in case you need to access them remotely. https://documentation.meraki.com/Cloud_Monitoring_for_Catalyst/Onboarding/Cloud_Monitoring_for_Catalyst_Overview_and_FAQ

RomanMD · ‎Jun 17 2022

the sunglasses are nice but I think smaller fonts and darker colors would be a better reward...

RomanMD · ‎Jun 17 2022

Do you think they teach Meraki now in the college?! 🤪

RomanMD · ‎Jun 17 2022

Unfortunately, there are many more in the same boat, but this can't be done with Meraki MX. So, the only way to do it is with a layer3 device in front of the MX which will do some routing and NAT.

RomanMD · ‎Jun 15 2022

The Identified and Reply URL needs to point to the DNS name of the appliance, therefore I don't see it possible to use the same Enterprise application for multiple networks. I wish I am wrong...

RomanMD · ‎May 28 2022

Yes, of course. Check the developer hub, on the right side you have the examples for Python using the Meraki library or python requests library. https://developer.cisco.com/meraki/api-v1/#!update-network-wireless-ssid

RomanMD · ‎May 28 2022

I experience the same behaviour with MR56 running 28.6. Two AP's connected to different switch models, the same behaviour, however, it does not happen too often. It could be once per week or more rare. Did not dig further what exactly happens, but looking at the other thread, makes me want to dig dipper next time when it happens.

RomanMD · ‎May 28 2022

As far as I've been able to understand it, Meraki will only handle first entry in the role attribute, so if the Meraki role is not the first in the list, it will not work. I have asked our ADFS colleagues to send in the role attribute the memberOf group which only contains a specific string.

RomanMD · ‎Sep 6 2021

You might as well, think of redesigning the actual solution. The actual one might be outdated and was valid few years ago because this is what Cisco sold us... but things are changing meanwhile..

RomanMD · ‎Aug 24 2021

as I have explained: retrieve one device of each type and substract the EID from each URL. If this will be an Access point - the EID will be valid for wireless. The only problem as I see here is a combined network with no devices.

RomanMD · ‎Aug 24 2021

and what is the problem to list one device and substract eid from the URL? {'address': '', 'firmware': 'wired-14-53', 'url': 'https://n333.meraki.com/NetworkName/n/xxxxxdbd/manage/nodes/new_list/57239045832485'} {'address': '', 'firmware': 'switch-11-22', 'url': 'https://n333.meraki.com/NetworkName/n/xxxxxcbd/manage/nodes/new_list/457203458394437'}

RomanMD · ‎Aug 24 2021

I don't think so. Each organization and network should only have one ID and one EID. For the automation purposes ID is used. If you want to build the links to the networks/devices then you can substract the EID from the URL of the organization or URL of the network as I have explained above. But of course, if you say that this does not work for you, I don't know another way...

RomanMD · ‎Aug 23 2021

the Organization endpoint returns the URL to the organization the Networks endpoint returns the URL to the network, where the YYYYYYY is the EID {'enrollmentString': None, 'id': 'N_6xxxxxxxxxxxxxxxxxx0', 'name': 'MY NETWORK NAME', 'notes': '', 'organizationId': '6xxxxxxxxxxxxxxxxxx0', 'productTypes': ['appliance'], 'tags': ['mytag'], 'timeZone': 'Europe/Bucharest', 'url': 'https://nXXX.meraki.com/MY NETWORK NAME/n/YYYYYYY/manage/usage/list'},

RomanMD · ‎Aug 23 2021

The way I am doing it: Fetch all orgs with endpoint: https://api.meraki.com/api/v1/organizations Parse all orgs and fetch all networks with: https://api.meraki.com/api/v1/organizations/{organizationId}/networks On the other hand - X-Cisco-Meraki-API-Key is the API key of a particular dashboard user, therefore please make sure that your user has access to all your organizations that you need to see.

RomanMD · ‎Aug 3 2021

I wouldn't bet saying unlimited, but I would say that I don't think any of us can hit the limit 🙂

RomanMD · ‎Aug 2 2021

@GIdenJoe I can assure you this is browser dependent. As you can see this is an experimental feature in Chrome. Maybe Firefox have implemented it too.. who knows... In my very extensive testing on MacOS, I can see this happening in Chrome, but I can't see it happening in Safari regardless of the quality you choose. Nor did the QUIC fallback mechanism work while the UDP ports are blocked. So I would avoid using QUIC at this moment, if possible.

About RomanMD

RomanMD

Community Record

Badges