Meraki

MacuserJim · ‎Nov 20 2018

There isn't a way to template cameras. I have been making wishes for this for a while...

MacuserJim · ‎Nov 20 2018

Ah, yeah the network should revert back to the config it had right before it was bound to the template.

MacuserJim · ‎Nov 20 2018

If you go to "Wireless > Radio settings" and view your profile do you have client balancing turned on? I wonder if that is causing that behavior as it tries to balance the number of clients associated to APs.

MacuserJim · ‎Nov 20 2018

Yes, if you bind a network to a template the current template configuration settings will override previous settings. Also any future changes to the template will be applied to any networks bound to that template. As far as retaining template settings when you remove the network from the template, there is not a way to do that. Can I ask what the reasoning is for taking a network off of the template and wanting to keep the settings? There may be another way to accomplish what you are trying to do.

MacuserJim · ‎Nov 19 2018

Two options, one you can use this in the client view list search box "(policy:"blocked")". Or If you go to the client list for the network and click the plus icon on the far right of the header row you can enable the column for "Policy". That will say what policy it has applied to it, in this case "Blocked" you can then sort the clients by policy.

MacuserJim · ‎Nov 16 2018

Those are used for mesh routing and I believe some may be for how MRs handle band steering.

MacuserJim · ‎Nov 16 2018

I have had some port forwarding issues in the past where simply restarting the MX resolved the issue. Maybe give that a shot? Also if you click into the device page for that camera are you able to verify that the MX is applying the forwarding rules for that device?

MacuserJim · ‎Nov 9 2018

You just have the MR33 in your home? You can't set up a VPN to an MR, you would need a Meraki MX (security appliance) to set up the VPN on.

MacuserJim · ‎Nov 8 2018

On a test iPad that I put into single app mode I am able to press the sleep/wake button and put it to sleep and then wake it up again. What iOS version are you running on it? Im running iOS 12, but I wonder if iOS 11 might handle that differently.

MacuserJim · ‎Nov 8 2018

Screen brightness isn't something you can manage through an MDM and single app mode restricts the use of control center so you can't manually dim the display while in single app mode. You could set the brightness first, then put the device into single app mode.

MacuserJim · ‎Nov 3 2018

Thanks @jdsilva! It's been great to share a bit of knowledge and insight and be able to gain some from others like you and @PhilipDAth.

MacuserJim · ‎Nov 1 2018

Just create a new network. When you create the new network you can check the box that says clone and clone the settings from an existing network. Then you can just move the devices to that new network.

MacuserJim · ‎Oct 31 2018

@khowanitz I find that Meraki's beta firmware releases to be quite stable. I would highly recommend testing before changing firmware revisions, but that would be for beta or stable.

MacuserJim · ‎Oct 31 2018

What is in the subnets 192.168.185.1/24 and 192.168.19.0/24? Are you using static IPs for your WANs?

MacuserJim · ‎Oct 31 2018

I know MX13.xx has some issues with AMP, particularly the Whitelist. Meraki has done a lot of work in the MX14.xx firmware revisions to improve this and has worked from my observations. I would suggest trying that out for you. Maybe try updating a test environment first to make sure it doesn't have a bug that might cause an issue for you.

MacuserJim · ‎Oct 31 2018

That sounds a little strange. In my experience if the connection between the two MX appliances fails then both MX's will act as a primary to provide internet access to both sets of now separated clients. The MX appliances talk to each-other directly, and it's this that helps the spare determine if it should assume the role of master (when it no longer gets VRRP responses from the default master). Is there any way that the spare MX can see the primary MX even after the LAN on the primary MX "fails"? This would prevent the spare from assuming the role of master and if that is the only route out for some clients I could see how it might prevent them from getting out to the WAN. https://documentation.meraki.com/MS/Layer_3_Switching/MS_Warm_Spare_(VRRP)_Overview Also I like to ask what firmware you are running as this might just be a bug in the firmware that someone may know about.

MacuserJim · ‎Oct 30 2018

Of course. Glad I could help!

MacuserJim · ‎Oct 30 2018

I am not sure about that one... The best answer I have (at least right now) is to track down which IPs your office is using for Office 365 and add those and then submit a make a wish to be able to add the FQDN.

MacuserJim · ‎Oct 30 2018

In another thread from about 2 weeks ago @NolanHerring mentioned you can have support change WAN 2 to act as the failover which allows you to set the "Cellular failover" firewall rules to apply when the MX fails over to WAN 2. That would allow you to deny everything, but Office 365 when on your WAN 2. https://community.meraki.com/t5/Security-SD-WAN/Block-access-to-the-guest-network-when-the-LTE-circuit-is-active/m-p/30265#M7356

MacuserJim · ‎Oct 30 2018

I use it in a few locations and it has worked pretty well for my needs. I have VoIP phones and found that during calls it would sometimes change the WAN it was using and cause issues for the call, so I set up the flow preference to keep that traffic going out the same WAN and keeping the same public IP as not to screw up the call.

MacuserJim · ‎Oct 29 2018

Here is Meraki's documentation or setting up SAML. https://documentation.meraki.com/zGeneral_Administration/Managing_Dashboard_Access/Configuring_SAML_Single_Sign-on_for_Dashboard

MacuserJim · ‎Oct 29 2018

Likely yes. It would be integrating with another system which would almost certainly have emails tied to them.

MacuserJim · ‎Oct 29 2018

The only two ways to give access to the dashboard are user accounts with an email address or SAML integration. You could technically create a fake email and set up an account so they are signing in with the email you created as their username and a password. They would then be able to reset the password from what you set it as after they log into the dashboard.

MacuserJim · ‎Oct 26 2018

Ah. I would recommend playing around with templates. They are awesome for managing a lot of networks. Also if you are setting up a device to deploy to another site (ie a retail store you manage) I would suggest assign it to the site where it will eventually be set up. Then if you'd like you can plug it in on your network so it checks in with the dashboard and downloads configuration settings or updates the firmware, if needed, then when it arrives at the site it is good to go. Otherwise you can ship a brand new device to the site and when they plug it in it will just take a few minutes for it to download configs and updates.

MacuserJim · ‎Oct 26 2018

Those are network specific settings so it makes sense that when you move them it would inherit the new network settings (which is likely default). Are these settings the same (or mostly the same) across all the sites? You can build a switch template and bind the networks to the template. That would allow you keep those settings. If you do have some one off settings you can over ride portions of the switch template. ie change LAN 1 from VLAN 1 trunked to default of VLAN 2 as an access port. Also why don't you bind the switch to the destination network from the beginning?

About MacuserJim

MacuserJim

Community Record

Badges