Meraki

Jim_Liang · ‎Dec 11 2023

If you are using Huawei mobile, to download the MS authenticator successfully, you can download "Baidu Mobile Assistant" 百度手机助手, then search and download the MS authenticator from there. Please refer to the Chinese Version of this post with the link above for the details.

Jim_Liang · ‎Dec 11 2023

If you are the admin for the orgs on both .com and .cn dashboards, with the identical email address as the account name. There is a limitation when enrolling them with Microsoft authenticator, if not updating the name when doing so, the latter one will override the first one. e.g. .cn account overrides the .com account on MS authenticator. You will have to change a different name during the enrollment. Please refer to the Chinese Version of this post with the link above for the details.

Jim_Liang · ‎Dec 11 2023

@LiWang 非常感谢您的测试验证。您的解决方案将有助于中国用户在大陆地区使用各种手机（包括华为品牌）去下载微软Authenticator，同时开启Meraki全球(.com)和中国区(.cn)控制面板账号的双因素验证功能。解决了此问题的终极困扰！

Jim_Liang · ‎Oct 13 2023

You can always use the Meraki global dashboard for the devices located in China. But for compliance purposes, it is recommended to use the China dashboard. Sometimes, the cloud connectivity (control traffic) may not be stable, we have seen some organizations get devices offline on the dashboard, which could be the China firewall issue or others, which can not be guaranteed. License transfer between the global and China dashboard orgs is supported. Just need to contact Meraki support for assistance.

Jim_Liang · ‎Jun 29 2023

Normally, one Dashboard organization in Meraki cloud can only have one type of MX/Z series license, e.g. the org is now in Enterprise license type, then you cannot add a Secure Advanced license in the same org even with a different network. Logic: The license type is on the organization level in Co-Term mode.

Jim_Liang · ‎Dec 29 2022

It looks to me that you didn't assign the port profile to the AP. Please check the below picture, select the profile you've created, and make sure it is assigned to your AP.

Jim_Liang · ‎Dec 22 2022

What do you mean by "pulling the old configuration from Meraki cloud"? Since you mentioned that the device can be online, I assume the cloud check-in was fine. then it's mainly the switch configuration on the cloud, which you can log in to Meraki cloud with your account and current those configurations as per your needs. Lastly, if you have changed the default local device login credentials on the cloud, after the cloud check-in, your switch would for sure use the new configuration, instead of the default one (serial as username, empty as pwd)

Jim_Liang · ‎Aug 22 2022

Technically No, but you can always discuss with a sales rep to find the best possible way to upgrade.

Jim_Liang · ‎Aug 10 2022

That's correct.

Jim_Liang · ‎Aug 8 2022

Your logs showed the connection challenge with the Meraki VPN registry, not really the VPN tunnel between MXs. therefore, it should not impact the actual traffic going through the VPN tunnel. worse case, it may impact tunnel establishment for new VPN peers.

Jim_Liang · ‎Aug 8 2022

No. I was saying that crossing different ISPs would make the VPN connection unstable. I have the same issue with my corpNetwork@home setup as the following. You can see the tunnels for myself and my colleagues connecting to the office Hub were going up and down frequently. But this is a general challenge, may not be your case. One piece of advice is that you can add the peer IP as an uplink monitor destination on your MX, at least to see if there is packet loss.

Jim_Liang · ‎Aug 8 2022

In terms of MR mesh deployment, here is the KB link. https://documentation.meraki.com/MR/Deployment_Guides/Mesh_Deployment_Guide https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Wireless_Mesh_Networking It may serve your point-to-multipoints needs as the following.

Jim_Liang · ‎Aug 8 2022

this usually happens at the ISP side, e.g. Site A & B are using different ISP providers that set some policies for some traffic cross carriers.

Jim_Liang · ‎Aug 7 2022

As I remembered, in order to have the USB dongle work, you have to connect the MX68CW WAN port and make it online to the Meraki Dashboard first. Additionally, there are only listed USB dongles supported for MXs.

Jim_Liang · ‎Aug 7 2022

What do you mean by "Point to Multipoints"? Do you mean mesh? the three APs must be in the same "network" from the Meraki dashboard org so they can mesh themselves.

Jim_Liang · ‎Aug 7 2022

Here you have the requirements from the KB.

Jim_Liang · ‎Aug 7 2022

As far as I know: In order to take advantage of cloud monitoring, an active Cisco DNA subscription (either Cisco DNA Essentials or Cisco DNA Advantage) is required. I didn't hear trial for this yet, maybe the Meraki presale can clarify it.

Jim_Liang · ‎Jan 13 2022

Per China dashboard user needs, created a Chinese version for future reference. https://community.meraki.com/t5/Dashboard-Administration/%E4%B8%AD%E5%9B%BD%E7%94%A8%E6%88%B7%E5%90%AF%E7%94%A8%E5%8F%8C%E5%9B%A0%E7%B4%A0%E8%BA%AB%E4%BB%BD%E9%AA%8C%E8%AF%81%E5%8A%9F%E8%83%BD/td-p/137307

Jim_Liang · ‎Jan 13 2022

对于在中国使用Meraki控制面板的英文读者，请参考这篇英文文章。 https://community.meraki.com/t5/Dashboard-Administration/China-cannot-enable-SMS-TFA-for-the-dashboard-account/m-p/69573

Jim_Liang · ‎Jan 13 2022

Meraki控制面板的登录账号支持双因素身份验证的功能（Two Factor Authentication, TFA）该TFA功能对于有强制二次身份验证才能允许登录控制面板的组织管理员来说是必选功能，同时对于有此登录安全保护需求的用户来说也是必要的功能。 TFA提供了两种验证方式，短信验证和手机APP一次性密码验证本文面向中国用户，介绍在启用双因素身份验证TFA功能的最佳实践。 TFA是对登录账号的身份验证保护功能，若需启用或关闭它，需要进入账号的Profile页面进行设置。步骤为： 1. 点击控制面板右上角的登录账号，选择"My profile" 2. 在配置项“Two-factor authentication"中点击启用或关闭TFA功能。在启用TFA时，控制面板提供了两种验证方式。短信验证此方式还在BETA测试阶段，仅支持少量国家。中国的手机号码不能保证接收到短信。实践表明，即使在设置成功后也极有可能在后续使用过程中收不到验证码短信，导致无法登录账号。因此，特别不推荐中国用户使用短信验证的TFA方式。手机APP一次性密码验证此方法为推荐中国用户使用TFA功能的最佳实践它需要在手机端下载谷歌Authenticator，每次登录控制面板账号时可以离线使用一次性密码验证登录。对于在中国使用的安卓手机，如华为、小米、oppo等无法从Google Play下载谷歌Authenticator，可以从手机内置的应用市场里下载微软Authenticator。使用的方式与效果相同。下面以微软Authenticator为例介绍详细的配置步骤。 1. 登录Meraki控制面板，进入账号的My Profile页面，点击启用TFA，选择APP方式。 2. 点击"Android“进入针对安卓手机APP的配置页面。说明：页面内的二维码用于手机APP扫描，需将扫描后生成的验证码输入到第三步的空格并点击验证。请务必将第二步的8个恢复码保存好，以备在任何情况下无法通过TFA登录时恢复使用。 3. 从安卓手机内置的应用市场搜索“authenticator"，选择并下载微软APP Microsoft Authenticator 4. 打开微软Authenticator，选择“添加账户”--“个人账户” 5. 选择“扫描QR码” 6. 扫描第二步在控制面板上的二维码，并将扫描后生成的数字填入控制面板空白栏，点击"verify“验证成功，完成配置。 7. 登出控制面板账号。至此，每次登录控制面板时需要打开微软Authenticator，输入离线生成的一次性密码以验证身份，完成账号的安全登录。如有任何问题，请于中国工作日上午9点至下午5点半之间拨打中文技术热线400-605-7895咨询Meraki专家。

Jim_Liang · ‎Nov 12 2020

I believe that the development of supporting Wifi-5 AP's are on the way.

Jim_Liang · ‎Nov 4 2020

vMX supports deployment on AWS/Azure/Alibaba Cloud international already from Nov 2020, GCP (Google Cloud Platform) is on the way and coming very soon. For the China region, as of today (Nov 4, 2020), vMX only supports the deployment on the AWS China cloud, Alicloud is coming very soon. You can get the vMX from the marketplace on different cloud providers as above.

Jim_Liang · ‎Oct 25 2020

Hi Mate Thanks a lot for the update. This is very much helpful for everyone.

Jim_Liang · ‎Aug 25 2020

Jim_Liang · ‎Dec 5 2019

Great point, @PhilipDAth Thanks a lot. Indeed, users with large organizations can use SAML SSO for the dashboard login. There is the KB article for SAML as the following. Configuring SAML Single Sign-on for Dashboard

Meraki

Community

About Jim_Liang

Jim_Liang

Community Record

Badges

Re: China cannot enable SMS TFA for the dashboard account

Re: China cannot enable SMS TFA for the dashboard account

Re: 中国用户启用双因素身份验证功能

Re: Options for a Chinese Meraki Site

Re: Z4 and Z3 licenses can be mixed?

Re: MR30H: The wifi works but connecting any devices to the ethernet ports ...

Re: Meraki MS-225 Switch is not coming online in Meraki Cloud.

Re: Will Meraki let you downgrade MX licensing say if you went from a MX600...

Re: Flapping AutoVPN

Re: Flapping AutoVPN

Re: Flapping AutoVPN

Re: Point-to-Multipoint Setup issues

Re: Flapping AutoVPN

Re: MX68CW Cellular Setup Issues

Re: Point-to-Multipoint Setup issues

Re: Requirements for monitoring Cisco Catalyst 9k's

Re: Requirements for monitoring Cisco Catalyst 9k's

Re: China cannot enable SMS TFA for the dashboard account

Re: 中国用户启用双因素身份验证功能

中国用户启用双因素身份验证功能

Re: Welcome to the MT forum!

Re: vMX Server Support Inquiry

Re: China cannot enable SMS TFA for the dashboard account

Re: MR33 - DNS Misconfigured & Uplink IP Address conflict with another devi...

Re: China cannot enable SMS TFA for the dashboard account

Re: Options for a Chinese Meraki Site

Re: MR30H: The wifi works but connecting any devices to the ethernet ports ...

中国用户启用双因素身份验证功能

China cannot enable SMS TFA for the dashboard account

Re: Options for a Chinese Meraki Site

Re: 中国用户启用双因素身份验证功能