Meraki

kdc · ‎Sep 30 2021

Thanks for the confirmation. We don't have AnyConnect licensing, so I will have to use the L2TP over IPSec option and manually assign the Group Policy.

kdc · ‎Sep 30 2021

We have work from home users connecting via Client VPN. I would like to restrict Client VPN connections so that the only thing they can do is RDP to their desktop that is in the office. Is there any way to configure rules on the MX to achieve this? Of course, with every policy there has to be an exception. We have some users with corporate laptops that connect to the Client VPN, and they should be allowed to have more access. Is there any way that I can assign specific Client VPN IP to specific devices, and then assign alternate rules to those IP's? Thanks

kdc · ‎Jun 15 2020

Yeah, I can see how setting it in the resource as part of the URI is the proper way to do it. However, I still want something a little more automated that builds that part of the URI from an array. I have a couple of ideas, but I think HttpValueCollection is the most promising. Create an HttpValueCollection and use System.UriBuilder to put together all of the different parts of the URI. https://stackoverflow.com/questions/32442777/how-to-use-get-method-of-invoke-webrequest-to-build-a-query-string I don't have time to try and code this right now. Hopefully I'll be able to circle back to it in a couple of weeks.

kdc · ‎Jun 2 2020

Thanks, I looked at that thread before posting my message. That is the kind of information I am looking for, but it is Python not Powershell. Ultimately the Python and Powershell deal with parameters a little differently (Python doesn't meet my requirements at this time). I managed to get a little further, but I am still stuck. I figured out that I need to include the square brackets in the name of the key, and I can get it working with a single value ('includedEventTypes[]' = 'client_vpn_connect'): $Body = @{ 'productType' = 'appliance' 'perPage' = $perPage 'includedEventTypes[]' = 'client_vpn_connect' } Now I am stuck on how to add a second value into that key. These don't work. 'includedEventTypes[]' = 'client_vpn_connect','client_vpn_disconnect' 'includedEventTypes[]' = @('client_vpn_connect','client_vpn_disconnect') #This one seems like a good idea, but I can't have two identical keys in the same hash table. 'includedEventTypes[]' = 'client_vpn_connect' 'includedEventTypes[]' = 'client_vpn_disconnect'

kdc · ‎May 29 2020

Hello, I'm trying to get VPN connect/disconnect events using Powershell to access the API. I can access all events, but I am having trouble filtering the events based on includedEventTypes. Pretty simple code: ### start code ### [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 $headers = @{ 'Content-Type' = 'application/json' "X-Cisco-Meraki-API-Key" = $APIKey } $Body = @{ "productType" = "appliance" #"perPage" = "1000" } $Events = @() $MerakiEvents = Invoke-RestMethod -Method Get -Uri $NetworkC10uri -Headers $headers -Body $Body foreach ($event in $MerakiEvents.events) { $EventInfo = New-Object System.Object $EventInfo | Add-Member -type NoteProperty -name occurredAt -Value $Event.occurredAt $EventInfo | Add-Member -type NoteProperty -name Type -Value $Event.type $EventInfo | Add-Member -type NoteProperty -name clientId -Value $Event.clientId #$EventInfo | Add-Member -type NoteProperty -name Mac -Value $Event.mac $Events += $EventInfo } $Events ### end code ### The code above works great, but I can't figure out how to send a "collection" in the $body for includedEventTypes. I want to filter by 'client_vpn_connect','client_vpn_disconnect'. I have tried tons of formats, and can't find anything that works. None of these examples work: $Body = @{ "productType" = "appliance" #"perPage" = "1000" #"includedEventTypes" = @('client_vpn_connect', 'client_vpn_disconnect') #"includedEventTypes" = 'client_vpn_connect','client_vpn_disconnect' #includedEventTypes[] = 'client_vpn_connect','client_vpn_disconnect' #'includedEventTypes[0]' = 'client_vpn_connect' #"includedEventTypes" = $EventFilter } Any help would be greatly appreciated. Thanks.

Meraki

Community

About kdc

kdc

Community Record

Badges

Re: Can I specify rules that limit Client VPN traffic?

Can I specify rules that limit Client VPN traffic?

Re: Powershell - getNetworkEvents - specifying multiple event types (includ...

Re: Powershell - getNetworkEvents - specifying multiple event types (includ...

Powershell - getNetworkEvents - specifying multiple event types (includedEv...