Meraki

pjc · ‎Dec 15 2023

Response from support including workaround. That's teach me to opt in to new features.... Thank you for contacting Meraki support. We are currently aware of a issue that is causing false positive alerts due to a on-going issue that is being investigated with high priority. As a workaround please disable Opt-in to view and manage alerts in a new centralized Alert Page on the early access page until the issue is resolved to clear the alerts shown. Once we have confirmed that the issue is resolved we will provide you a update.

pjc · ‎Dec 15 2023

Yep, same here, hundreds of our AP's are reporting this error this morning, logged with support Access point has an ethernet negotiation failure

pjc · ‎Dec 5 2023

Do you mean MR26 are end of life ? MR36 are current models, no EoL or End of Sale announced. Whci one do you have ? If you have MR26 then MR36 would be an ideal replacement

pjc · ‎Oct 19 2023

I was wondering when trying to resolve issues previously I was having at some of my SDWAN sites and suspected packet fragmentation where, if any, MTU value was specified on the MR's. I tried reducing MTU sizes in NPS Radius connection policies, but had no joy. Ended up having to use the Meraki Proxy Radius to broker requests for those troublesome sites where there was fragmentation

pjc · ‎Oct 12 2023

I have the same issue at a few of our SD-WAN sites with Radius and EAP-TLS certs. My solution was to use the Meraki Cloud Radius Proxy for these sites - the request goes out directly across the internet (Not over SDWan where there is added VPN packet overhead) to the radius proxy and then onward into datacentre where the request is accepted and returned back to the cloud radius and onto the WAN site. Note: The meraki radius test feature (where there is no added user certs packet overhead) worked fine at these sites where it was only using username/pw authentication I found changing MTU size on NPS radius made no difference - you have little or no control on the MTU size across your ISP links etc Some pings showing packet fragmentation and comparing against working sites may help you check if MTU is your issue

pjc · ‎Oct 11 2023

Was someone in Meraki trying to fix the ongoing tagging bug (lower case tag names) and broke this ? I hope a full and honest explanation is forthcoming when this has been resolved. We are looking at removing wired ethernet in the offices and going fully wifi - This sort of outage has got me worrying about that proposed strategy

pjc · ‎Oct 11 2023

Yep just tried disabling SSiD availability - AP's cannot get updated - However, we have other networks in our organisation/dashboard that use SSiD availability schedules and they are broadcasting OK - is this network specific ?

pjc · ‎Sep 29 2023

I understand WPA3 is mandatory on WiFi6E (6ghz) - I can see this causing issues with legacy clients that don't support WPA3. Could it take a few years for all clients to be 100% compatible ? If so, doesn't this stifle the roll out of 6ghz now ? The idea of paying a premium for buying CWxxxx AP's now but not being able to take advantage of them right away by enabling 6ghz SSiD's kinda takes the shine off them. This must be the first time that there's no backward compatibility in this way to account for all clients on the same SSiD....

pjc · ‎Sep 1 2023

Same issue here - My dashboard is reporting that the tags should all be in lowercase where all of my tags are a combination of upper and lower case.

pjc · ‎Aug 4 2023

I would create a NPS connection policy just for the HQ access points and add a MTU entry (try different MTU packet sizes) within the connection policy just for the HQ. I've seen issues before with radius timeout when using EAP-TLS/Certs at some of our SD-WAN sites where those sites we fragmenting the oversized packet. I ended up having to use the Meraki cloud radius proxy as the middleman to get it to work at those sites

pjc · ‎Aug 2 2023

Thanks

pjc · ‎Aug 1 2023

Thankyou Karstenl for the link to the doc. Has anyone have any info on licensing types (per client, network, organisation) needed and pricing please ?

pjc · ‎Jul 28 2023

Hello all I'm looking at the options for guest wifi web filtering and reporting for a small network of MR AP's within our existing Meraki organisation and I have a few questions around licensing and functionality that I would be very grateful if anyone has answers. I would like to know: 1. Can I integrate Cisco Umbrella into my existing MR Enterprise co-termed license model and apply it to just one network (with say 10 x MR AP's in it). How many Umbrella licenses would I need ? 2. Would I need to upgrade my existing MR Enterprise co-term to Advanced MR license (if needed) for the whole of the organisation or can I just upgrade one network with those AP's in that network. Can MR Enterprise and MR Advanced license co-exist in the same Organisation. I don't want to move our existing to a per-device licensing model, co-term works best for our organisation 3. Is the Umbrella license per MR AP or per MAC address client ? And if MAC client, do any new clients on the guest network that exceed the limit just not get filtering applied to them ? 4. How would I apply the Umbrella filtering policy to guest devices ? Can I just add device MAC addresses in a Meraki group policy and apply a Umbrella filtering policy to that ? Presumably I can then do device web activity reporting in Umbrella dashboard (I can cross reference MAC addresses with owners of those devices) 5. Has anyone got a rough idea of pricing for Umbrella per AP or client ? 6. Anything else I should know about Umbrella/Meraki integration ? !! Many thanks in advance !

pjc · ‎Jun 16 2023

Are you using 20MHz channel width on the wifi ? I think this will limit bandwidth to approx 200mbit/s if using single 20MHz channels

pjc · ‎Jun 6 2023

You're gonna have to dig deep into the NPS logs and run some Wireshark captures. First off, anything changed, was it doing it before ? So many variables, do all devices do this ? anything changed recently? are NIC drivers up to date ? Do all NPS severs have the same issue ? Are all networks/AP's having the issue ? etc etc you get the idea...come back with some more detail about what you know and what you have tried and what you can rule in or out

pjc · ‎Jun 6 2023

@GreenMan It's not a problem, it's easy to just ignore it, I was just curious as to whether it was just me seeing this for the first time (and if so why) or if others with wireless only were seeing it too and if so if Meraki knew about it and had a reason for the change....

pjc · ‎Jun 6 2023

@GreenMan Thanks for the idea, but no, definitely never had any switches in the organisation and all networks have only ever been setup wireless only. The switch firmware has only appeared recently, so I suspect it's something to do with this 'independent firmware for cisco/ms switches' as per the banner

pjc · ‎Jun 6 2023

Just started seeing firmware for switches in addition to MR firmware listed in my organisation for the first time ever (organisation > firmware upgrades) - my organisation is MR wireless only, no Cisco or Meraki switching - any reason for this ? - Cheers

pjc · ‎May 18 2023

Just received the same email, the 2nd line ' AP's with manually assigned channels will revert to the default indoor RF profile ' is worrying, in that the default indoor profile will have 'auto channel assignment', so does that mean any ap's I have previously set to manual (to avoid neighbours I have no control over) will now be changed to auto, even if they are not using or have the capability to use UNII-3 channels ?

pjc · ‎May 12 2023

As @GreenMan has already mentioned, create a new network (clone if from the existing network) and move these 2 stores AP's into it. You then modify the employee SSID L7 Firewall settings in this new network to block Facebook. Job done

pjc · ‎Feb 2 2023

Thanks for confirming, some funnies going on at my end as it turned out, all okay now

pjc · ‎Feb 2 2023

Can't get to https://account.meraki.com/secure/login/dashboard_login this morning, anyone else having issues ?

pjc · ‎Jan 17 2023

To get serious with Meraki API's (have so far only dabbled a bit) - I know they can and will save me precious time !

pjc · ‎Jan 5 2023

could it be the client 'roaming aggressiveness' setting ? Try lowering this to medium or low, this will result in the client not searching as much for other ap's that are nearby once already connected. Here's for example the intel card in my laptop settings You can also try setting your ap's radio profile settings to auto power if they are not set this way already

pjc · ‎Jan 5 2023

Yep they work fine at 1Gb. Just plug in, we have ports set to auto/auto, our MR44's sync up at 1Gb/s full duplex

About pjc

pjc

Community Record

Badges