Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About Silas1066
Silas1066
Getting noticed
Member since Feb 4, 2018
02-05-2020
Community Record
49
Posts
3
Kudos
0
Solutions
Badges
02-03-2020
10:27 AM
so just to recap: I create a new wireless network with PSK authentication. Map it to a VLAN/subnet on the network, and make sure it can communicate via layer3 to the existing corporate wireless. then go into the policy on both wireless networks, enable bonjour forwarding, and specify that new printer VLAN?
... View more
02-03-2020
10:09 AM
I want to allow my wireless clients to print to Bonjour printers, but here is my challenge: My corporate network is set up with 802.11x RADIUS authentication and MAC-filtering. Printers will not be able to join that network. So it looks like I have to create a separate wireless LAN for the printers. I looked at the document from Meraki https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/Bonjour_Forwarding but I am a little unclear on a couple things. Does this "service VLAN" need to be something I set up on my switches in advance? Should it be the same VLAN that the printers join? Or is this some logical thing that runs behind the scenes?
... View more
01-31-2020
10:41 AM
yes, it looks like it is working. Unless the client is listed with a MAC association and policy, they get "packet filtered" errors when trying to do anything on the network--so it looks like they are blocked. thanks for your help. This was a bit counter-intuitive, but now it makes sense
... View more
01-31-2020
07:08 AM
I have the SSID and MAC working (assigned a policy to my laptop), but I am a little unclear on the firewall blocking so I should go into the SSID and select layer 3 firewall rules and set the default action to block any to local LAN (or any) and simply leave it as that? wouldn't this block access to everything regardless of allowed MACs? Or does the individual group policy override that?
... View more
01-27-2020
08:59 AM
I see the group policy creation screen, but don't see anywhere to add a list of MAC addresses
... View more
01-27-2020
08:40 AM
I haven't tried that, but I would imagine that if you have Meraki access-points and a MX, the reporting would still work. You just wouldn't get any info about the switches
... View more
01-27-2020
08:39 AM
I am building out a new network to replace an existing wireless network that used MAC filtering for clients. The old setup consisted of a pre-shared key and MAC list. I see that in dashboard, you can go to organization-->clients and add a client to the network, but after I put in the MAC and a name, and hit save, it simply says "changes saved" --I don't see that MAC listed anywhere. Will it not show up until the client actually connects? Also, to do MAC filtering do I have to use a Radius server? Or can I use the old pre-shared key with MAC filtering?
... View more
09-23-2019
08:43 AM
wouldn't the second WLC require the same AP license account as the first (active)?
... View more
09-23-2019
07:46 AM
I am in the process of designing a enterprise wireless solution for a client, and I was wondering what the cost difference was between sticking with two Cisco Wireless LAN controllers (redundant), with a 50 AP license vs. going with Meraki Access points and a cloud subscription? Waiting for my sales reps to get back to me on this, but I was wondering what you guys have experienced in regards to this? Sounds like if I put controllers into a redundant pair, I would need double the AP licensing. But the client is a little averse to subscription service.
... View more
09-12-2019
01:08 PM
If I use the external, dual-band antennae for my Meraki MR-74 AP, is it possible to put one antenna outside a building, and another inside? The requirement is to have people in the building, and outside, be able to associate with the wireless network. Is there a specific antenna I should use that is rated for outdoors?
... View more
08-28-2019
10:16 AM
I have a stack of 3 MS-350s, and I have a SVI (VLAN interface) configured for my client network. This is also the network that the switch stack routes through to get to my MX security appliance. The logical address is set to 192.168.11.5 , and I can ping anyone from that address on the stack. But the other two switches have .6 & .7 addresses that cannot be directly pinged from the client machines, and when I go into tools to ping "from" and interface, I only get the .5 SVI. Is this by design? The only trouble I am running into is that a network monitoring server is on the network, and I'd like it to test if the second two switches are still online by pinging .6 and .7
... View more
08-28-2019
10:13 AM
agreed --however, it was a requirement of the client. I couldn't change it
... View more
08-03-2019
07:40 AM
3 Kudos
ah I figured it out lol. I had "block local lan access" on for the the network in the SSID firewall settings for the wrong network (should been on for guest only). be careful of that one!
... View more
08-03-2019
06:55 AM
I am putting in a new remote site with a Meraki MS switch stack and wireless APs. The PCs and wireless clients are to be put on one subnet (172.16.88.0 /22) VLAN 980. So I created the network/vlan on the switch stack, and for DHCP I selected relay and put in the IP address of a DHCP server on another subnet that is reachable from the switch stack (I put in a static route to that remote server) My wired PC clients work fine. They connect to the switch, grab an IP address from the server, are able to ping everything ad connect to the Internet through an upstream MX appliance connected to the switch. But the wireless clients cannot. For the wireless network, I configured the port connecting to the AP as a trunk with the native VLAN set to 980, and selected "bridge-to-LAN" in my SSID setup. The AP itself comes up fine, and clients can associate with it using WPA2, but they never get an IP address from the DHCP server. If I hard-code the wireless adapter with a valid address on that 980 VLAN, the client still cannot ping the switch stack--but strangely enough, the switch can ping the wireless client. The client cannot see the rest of the network or connect to the Internet. I tried changing the port for the AP to an access port on VLAN 980. It didn't fix the issue. Something I am missing here?
... View more
01-20-2019
10:32 AM
I ultimately opened a case with Meraki looks like the upstream Comcast router is causing the issue --not passing the traffic correctly to the security appliance
... View more
01-19-2019
09:40 AM
I just set up a RAS VPN on my MX84 , but I can't establish a VPN session. Went through the setup for the VPN, created a subnet, key, and selected meraki cloud authentication. I then went to my Mac and created a new VPN connection with L2TP server address (which is pingable and I can resolve the name) user account and password key and "send all traffic over vpn" selected. When I try to connect, I get the message "L2TP server did not respond". I don't see anything in the Meraki dashboard logs. So I tried with my iPhone over the Verizon network, but I get the same result. Is there something I forgot to do?
... View more
01-18-2019
02:09 PM
I managed to figure it out. The uplink is basically its own physical interface in a kind of VRF. It can be configured in the same network as a SVI you create on the switch, just so long as the connection is changed to a trunk. So I created VLAN 101 and assigned the uplink to 192.168.101.10 /24 I then created a SVI interface 101 on the switch with an address of 192.168.101.4 , with a default gateway of 192.168.101.2 (the MX) A little counter-intuitive, because you wouldn't be able to do that on a Catalyst L3 switch. But it appears to be working fine now
... View more
01-18-2019
01:25 PM
OK, I am having an issue figuring this out I have a MX connected to a MS350 switch, and since the trunk port was getting errors, I made the connection an access port instead of a trunk. So the MX has a VLAN 101 interface 192.168.101.2 /24 connected to 1 on the switch, which is in VLAN 101 and configured with a static address 192.168.101.10 /24. All that works fine, as the switch talks through the MX to the cloud, etc. Problem is, I now want to create another subnet/vlan/SVI on the switch for my wireless network, and route to the Internet. Is this even possible with the current setup? What is the workaround?
... View more
01-18-2019
12:26 PM
I have a new site with a MX appliance in it. A MS series switch is connected to the MX. I also have a central site, and when we added a new switch license/inventory, the switch shows up in the central site. If I go to monitor-switches and click "edit" and move, I don't have the option to move the switch to the other location. The second location doesn't show up. How do I do this?
... View more
01-18-2019
08:15 AM
thanks for your help that removing from spare status would have really thrown me it is all good now 🙂
... View more
01-18-2019
07:37 AM
Probably a pretty basic question, but I just put a MX security appliance out at a remote site for my company. We already have an existing Meraki network with MX appliances, switches, APs, etc. and this new MX shows up as a "spare" in my dashboard. I want to 1. Create a new network for the site 2. Move this spare device into it So my question is, when I create a new network by going to Network-->Create New Network , will it impact my existing setup? How do I then move the MX (and additional switches that haven't been configured yet) into it? (I want to make sure I don't mess anything up)
... View more
08-22-2018
08:31 AM
That wasn't it remember that this switch had been added to the network weeks before as a stand-alone and was running the same firmware revision as the others.
... View more
08-21-2018
01:25 PM
Yes, but in this case it was a bit different I was not creating a new stack: I was adding an already configured switch to an existing stack. I made sure the firmware was all the same, powered down the stack (and the third switch), and then added the new switch by re-arranging the stacking cables in the correct order. When the stack reloaded, I went to stack management and added the third switch to the existing stack. Problem is, because the MAC address was lower on that switch, it took over the master role
... View more
08-21-2018
12:44 PM
Do I need to worry about this creating a problem if I add a 4th switch to the stack? What if it becomes master?
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 3 | 1370 |
