Meraki

MacuserJim · ‎Jan 15 2019

It would be nice to have the option to reboot devices through the API, I can see why it's not there, but the world should revolve around me. 😉 I am working on a project to transition 1500 networks from separated networks to combined networks and moved to another template (this is split up over the course of a few days). I have a python script to do heavy lifting for me. However during this course it is pretty common for the MS to lose connection with the Meraki cloud within a few minutes after being transitioned, it still passes traffic as it's clients are still online. Since I am running this at night, by morning most of the MS appliances are online, however there are still a few that we need to reboot by calling someone locally and have the power cycle it. I think if I could have the script tell the MS to reboot immediately after the transition it wouldn't have that downtime or require the manual intervention.

MacuserJim · ‎Jan 9 2019

That is strange. And you're sure you don't have any Insight licenses in your dashboard, even trial licenses? You may want to call into support and ask about that and see if there is something quirky going on in your dashboard, if something is getting missed, or to clarify a bit.

MacuserJim · ‎Jan 9 2019

@Aaron_Wilson You need to have a Meraki Insight license. Once you have a license for that you can go to "Insight > Configure > Licensing" in the menu on the left of your dashboard window and apply the license to a network with an MX appliance in it.

MacuserJim · ‎Jan 8 2019

Here are a few of my goals for this year. I like to approach things the Meraki way and keep things simple. Last year I created and tested a new network template for my retail stores prior to the holidays. So this year I'll be combining separate networks into combined networks and moving them to a new template using the API and Python. My goal is to get the ~1500 locations done by the end of January. Become a solid member of the Meraki Community and provide more insight into questions or problems other members have and take that as an opportunity broaden my networking knowledge. To create a better work/life balance I have a goal to go to the gym 5 times a week and get in better physical condition. Take my wife on more camping trips this summer to enjoy the great out doors and put myself in a position to use the Meraki iOS app.

MacuserJim · ‎Jan 4 2019

Have you checked the VPN status in the dashboard to make sure the VPN connection is up with no issues?

MacuserJim · ‎Jan 4 2019

@jdsilva We have this sign on one of our network closet doors for that very reason. (If you've never seen this before read it out loud)

MacuserJim · ‎Jan 4 2019

@BrechtSchamp Nerd! haha good work on calling the hardware!

MacuserJim · ‎Jan 3 2019

I would lean toward the vMX in Azure. I think that will be the easiest to set up and maintain. The troubleshooting will be a lot easier should you have any communication issues and being able to easily see uptime and VPN connectivity will make your life a lot easier.

MacuserJim · ‎Dec 27 2018

I found this for the ports. https://www.quora.com/What-is-the-port-number-for-whatsapp As for URLs I didn't find anything right away, but I would suggest doing a packet capture to see what it is attempting to talk to.

MacuserJim · ‎Dec 21 2018

You are wanting the clients on the isolated (NAT'd) SSID to print to the Epson printer? You are isolating them so they can't see other clients. I would suggest you create an actual VLAN to have that SSID drop clients into, and then add firewall rules to allow clients in that VLAN to see/print to the Epson printer.

MacuserJim · ‎Dec 20 2018

That is very likely the issue. A network config I inherited from a previous IT admin had a VLAN mismatch like you are describing and it would cause a lot of little red lines in the connectivity of the switch. By creating a new template to properly bring the VLANs in sync resolved that issue.

MacuserJim · ‎Dec 20 2018

I've something similar if there are VLAN inconsistencies. For example a switch using the default VLAN 1 settings, but the MX it is behind only has VLAN 10 and not an actual VLAN 1. Also how does your cabling look? Is it possible the cabling is worn, or longer than spec?

MacuserJim · ‎Dec 20 2018

Have either of you reached out to support about it?

MacuserJim · ‎Dec 20 2018

Makes sense. You could try building that installer using different browsers or maybe even try a different computer, but it might just be a bug that Meraki may or may not address.

MacuserJim · ‎Dec 20 2018

Did they say anything about why you're on the legacy Systems Manger, is it an option for you to bump up to the current SM?

MacuserJim · ‎Dec 19 2018

Is the MX sitting behind the modem or the Cisco router? If it's behind the modem then do that in the modem, if it's behind the Cisco do it in the Cisco.

MacuserJim · ‎Dec 19 2018

Yeah, it'll need its own IP.

MacuserJim · ‎Dec 19 2018

The limit of the MX is the amount of data it can process through it. You can get more by turning off things like content filtering, but that is just incremental performance gain. It's like a 1ton truck, it can only pull so much weight, by adding another hitch and connecting a second trailer doesn't mean you are going to be able more weight with the truck.

MacuserJim · ‎Dec 19 2018

Yeah you can do them all at once. I would suggest configuring them and setting them up on a bench before hand so they can do firmware upgrades and download config settings before hand. That will only mean a little less downtime when you are doing the physical swap.

MacuserJim · ‎Dec 19 2018

I think you are running the legacy Systems Manager, since it does not look anything like the current documentation or my dashboard. https://documentation.meraki.com/SM/Device_Enrollment/Enrolling_Devices I would suggest reaching out to support and asking about that.

MacuserJim · ‎Dec 19 2018

You can do them all at once. Do you have a specific concern about doing them all at once?

MacuserJim · ‎Dec 18 2018

Have you tried adding the deny rules to the layer 3 firewall rules on the MX appliance to see if that makes any difference?

MacuserJim · ‎Dec 18 2018

Are you referring to a Windows installer for Systems Manager? Can you post a screenshot of what you are referring to?

MacuserJim · ‎Dec 17 2018

I would suggest doing the deny rules on the MX appliance. I assume you are denying any protocol and any port in your deny rules? Give that a try and let us know how that goes. Also, when you changed a group policy by going to "Network wide > Group policies" and creating/editing a group policy it rebooted your MX? It shouldn't do that, I make revisions like that quite frequently and have never had the MX reboot because of it. If that is the case then I would think it was a poorly timed coincidence or an issue with your MX.

MacuserJim · ‎Dec 17 2018

Are you setting the L3 firewall deny rules on the MR or on the MX?

About MacuserJim

MacuserJim

Community Record

Badges