The Meraki Community
Register or Sign in
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • About DevilWAH
DevilWAH

DevilWAH

Here to help

Member since Jul 23, 2020

‎05-26-2023
Kudos from
User Count
DarNic
DarNic
1
RaphaelL
Kind of a big deal RaphaelL
4
cmr
Kind of a big deal cmr
2
AdBurl
AdBurl
1
Seshu
Meraki Employee Seshu
1
View All
Kudos given to
User Count
Tamas88
Tamas88
1
View All

Community Record

18
Posts
9
Kudos
0
Solutions

Badges

First 5 Posts
Lift-Off View All
Latest Contributions by DevilWAH
  • Topics DevilWAH has Participated In
  • Latest Contributions by DevilWAH

Re: inaccurate API data?

by DevilWAH in Developers & APIs
‎05-03-2023 02:43 PM
‎05-03-2023 02:43 PM
The simple way to get round it is to count the unique mac in    dashboard.wireless.getNetworkWirelessClientsConnectionStats( network_id )     ... View more

Re: inaccurate API data?

by DevilWAH in Developers & APIs
‎05-02-2023 05:00 AM
‎05-02-2023 05:00 AM
But they are people are using the network? This is why it seems odd clients have transferred GBs over the last few days  ... View more

inaccurate API data?

by DevilWAH in Developers & APIs
‎05-02-2023 04:17 AM
‎05-02-2023 04:17 AM
Hi does anyone else see this. two API endpoints giving different results? why does one show evidence of clients and the other not?    When i run    dashboard.wireless.getNetworkWirelessClientCountHistory( network_id) on a network for the last 7 days it returns    { "startTs": "2023-05-01T00:00:00Z", "endTs": "2023-05-02T00:00:00Z", "clientCount": null }   but if i run connection stats i see evidence of clients?   dashboard.wireless.getNetworkWirelessClientsConnectionStats( network_id )   [ { "mac": "xx:xx:Xx:Xx:xx:xx", "connectionStats": { "assoc": 0, "auth": 0, "dhcp": 0, "dns": 0, "success": 5 } }, ... View more

Re: Wi-Fi Clients being Disassociated due to "excess frame loss"

by DevilWAH in Wireless LAN
‎03-21-2023 04:30 AM
‎03-21-2023 04:30 AM
No, we have 70,000+ clients so not possible to ensure every things i upgrades or that manufactures have drivers to support it. So we disabled 802.11v on the networks. If you have a good AP placement design it should take into account client density and if you also then set the MDR and roaming setting to encourage clients to move to the best AP (ie don't leave MDR at 1 or 6) clients should be distributed evenly across them.    I think this is one of those areas where a plug n play solution like meraki falls down a bit compared to something like cisco aironet where you can tune how 802.11v operates and how aggressive it is.    Our view is that if without load balancing turned on we have a resonaly distribution of client to AP then we dont worry  ... View more

Re: Wi-Fi Clients being Disassociated due to "excess frame loss"

by DevilWAH in Wireless LAN
‎03-20-2023 02:42 PM
5 Kudos
‎03-20-2023 02:42 PM
5 Kudos
This is typical symptoms, they are roaming but not due to signal, with 29.4 clients are actively "pushed" by the AP. The event log does not show it correctly as it shows the client both connected to the new and old AP for a time due to the clients not cleanly roaming. Sites with high client density and or over lapping AP's are more likely to see it happening than smaller sites with lower density.    Check out "Client Balancing Behaviour - MR 29.X and Newer Firmware" from the following meraki doc. which is where 802.11v was enabled.    https://documentation.meraki.com/MR/Other_Topics/Client_Balancing   In brief now the AP tries to tell the client to move to a new AP to better balance clients across AP's, before this never happened with a active connection. in passive load balancing the AP delays allowing the Client to associate with a highly utilised AP in the hope it will associated with a different one with less clients.    post release 29.x once associated the AP send a list of potential better AP to the client in the "hope" it will move across (its always client that makes the decision) if you have a client with NIC / drivers that always "listens" to the AP it will try to switch over. This normal would not have a negitive impact if    1. The client authenticates with out issue or delay 2. the new AP does not immediately tell the client to move back.    From out experience in some offices how 802.11v has been applied, AP density, utilisation and client density  means some client  will constantly move between AP even when stationary every few minutes.    Again not an issue in it self, but of you have any compounding issues with authentication or association being delayed users are going to notice it and it will have negative effect on performance.    Also yes we do have a case with meraki, it has been escalated and while we have resolve our issues we are still working with them to provide some more detailed captures and logs for them to look in to.  ... View more

Re: Wi-Fi Clients being Disassociated due to "excess frame loss"

by DevilWAH in Wireless LAN
‎03-15-2023 07:12 AM
‎03-15-2023 07:12 AM
That depends what you are doing.    For example if you have  visitor / guest flow with a captive portal then you need CoA to reset the session after the user has signed on, but this is only normally used with MAB and the long auth inssue down not seem to affect this.    Also if you are using profiling in ISE and you want a way for ISE to instruct the AP to force clients to reauth you need to use CoA.    but if you just doing straight 802.1x auth to a radius server it wont make any difference to disable it.      ... View more

Re: Wi-Fi Clients being Disassociated due to "excess frame loss"

by DevilWAH in Wireless LAN
‎03-15-2023 03:04 AM
3 Kudos
‎03-15-2023 03:04 AM
3 Kudos
After disabling 802.11r, 802.11W and load balancing we saw a lots less. But I believe this is because prior to 29.5 load balancing only happens during associating, where as post 29.5 it active while clients are connected. So we have left load balancing disabled so we still see clients roam when they need to, but significantly less than when it was enabled. The new software seems really aggressive when it is enabled.    One other thing we seemed to notice is the CoA issues seemed to affect clients authenticating with EAP-TLS more than PEAP. Talking to meraki support there were saying when CoA is enabled the client always needs to go through a full auth process when it roams, and every packet must be seen before it can continue.    What we took from this is you can't at the moment use CoA on a WLAN using enterprise (802.1x) for authentication as the results are unpredictable. In most cases this will not be an issue.    For us this seemed to be a combination of 3 factors    1. 29.5 introduces active load balancing where when clients are already connected it will attempt to "encourage" them to move to better AP's. This can be remediated to an extent by disabling load balancing on the WLAN to return it to pre 29.5 behaviour.  2. CoA can cause long authentication delays so if you don't need it disable it, partially on WLAN using 802.1x based authentication. I think this was always a problem we had in the background, but the aggressive roaming caused by 29.5 highlighted it.  3. Lastly when the client roamed due to load balancing it was not cleanly disassociating from the old AP and this is where the "excessive frame loss" error comes from. looking at the logs you see the client connect to the new AP and then a few minutes later a error from excessive frame loss and getting disassociated from the original AP. This seems to happen when it roams due to load balancing.I don't know if this has any thing to do with the issue if meraki is seeing the client associated with the old AP when attempting authentication to the new one?    Another issue we found it the lack of ability with Meraki hardware to troubleshoot this, we were asked to capture packets but for this required a linux based device or setting up a "spare" meraki AP to capture packets over the air.  In the end we deployed some cisco aironet AP in sniffer mode to do it.    Thankfully our company is large enough we have spare AP's that we can set up a LAB with or deploy for testing, but without this the logs and data we could get from meraki was very limited. And even after uploading over the air packet captures to Meraki support in the end it came down to working it out ourselves. I think over the few months we were looking at this i spoke to 4 or 5 meraki engineers and each time had to start from scratch explaining it and being told the same basic troubleshooting steps made for a very frustrating experience.  ... View more

Re: Getting AP down time over reporting period.

by DevilWAH in Developers & APIs
‎03-14-2023 02:56 PM
‎03-14-2023 02:56 PM
This has the same issue there needs to be something to capture the hooks, store the data and then create a report at the end of the week / month. And this is what i am trying to avoid we have a number of tools that check AP status and so i could for example use a call to Solarwind to get the AP up / down time. But i was curious if there was a way to do native in meraki.   And it looks like you can do it using the network alerts history and network devices.    results = dashboard.networks.getNetworkAlertsHistory(net["id"], perPage = 1000, total_pages='all')     for net in networks: results = dashboard.networks.getNetworkAlertsHistory(net["id"], perPage = 1000, total_pages='all') print (results) deviceevent = (event for event in results if event["device"]["serial"] == "xxxxxxxxxx") for event in deviceevent: print (f' Time start {event["occurredAt"]} type {event["alertType"]}') print   gives the events for an AP and only needs 2 calls per network. Then it's not too hard to loop through this and for a specified time range count the down time per AP.    Time start 2023-02-13T10:05:24Z type An access point came up Time start 2023-02-10T23:25:20Z type An access point went down Time start 2023-02-05T17:07:55Z type An access point came up Time start 2023-02-01T00:21:30Z type An access point went down ... View more

Re: Getting AP down time over reporting period.

by DevilWAH in Developers & APIs
‎03-10-2023 06:50 AM
‎03-10-2023 06:50 AM
I thought of that but that defeats the purpose of running a single vendor agnostic monthly reporting scrip (Actually running weekly and combining) for all our separate wireless deployments. As the meraki dashboard shows the AP connectivity history of the AP it must be stored with in the data meraki hold so it would be nice to get to it via API. I was going to look at the events as I think they also have AP up/down so maybe can parse this and count the status changes and time stamps.    I might see if this data is in DNA as we also monitor the Meraki AP's in that.      ... View more

Getting AP down time over reporting period.

by DevilWAH in Developers & APIs
‎03-10-2023 04:07 AM
‎03-10-2023 04:07 AM
Hi,    can anyone help me with how i can find the total down time (or time spent in a status) for an AP over a time period?    dashboard.organizations.getOrganizationDevicesStatuses(org_id, productTypes=['wireless'], total_pages='all')   Will give the current status, but i want to be able to see how long and how many times an AP has gone of line in the last week? If i am running the report once per week I not only want to know the current AP status but the history for the last time period.    The code below could be nicer but it was a simple way to pull back the numbers of AP in each start for each network. but as i say it's only when the Script runs it doesn't provide the history I need.    Is there any way i can find per device the status changes and time stamps or other way where i could work this out?    Thank you    networks = dashboard.organizations.getOrganizationNetworks(org_id) ndevices = dashboard.organizations.getOrganizationDevicesStatuses(org_id, productTypes=['wireless'], total_pages='all') for net in networks:        numon = len(list({v['name']: v for v in ndevices if (v["status"] == "online") & (v["networkId"] == net["id"]) }.values()))        numalert = len(list({v['name']: v for v in ndevices if (v["status"] == "alerting") & (v["networkId"] == net["id"])                      }.values()))         numdormant = len(list({v['name']: v for v in ndevices if (v["status"] == "dormant") & (v["networkId"] ==                            net["id"])}.values()))         numoff = len(list({v['name']: v for v in ndevices if (v["status"] == "offline") & (v["networkId"] == net["id"])}.values()))     ... View more

Re: Getting Started with Meraki API using Python Part 7: Bringing It All To...

by DevilWAH in Developers & APIs
‎02-27-2023 04:07 PM
‎02-27-2023 04:07 PM
This is a nice little series, one thing I did as I got in to it was create an example script of ways to filter and search the responses.   Like, this will create a new list from the response  where the key "AP" = WAP1, that you may want to loop though and use to search a different response. subtest = [r for r in ls_dict if (r["AP"] == "WAP1")] and This will just count for you how many entries there are based on a search.  number_off = len([r for r in ls_dict if (r["clientMac"] == "FFFFFFFF")])   How about one last leg of the journy to give some examples like this to help people getting in to Python / API / JSON to take the journy to the next level.  May be sourced from the community, not lengthy code but single line well described examples that carry out specific by common operations.    ... View more

Need some help determining the values from API calls

by DevilWAH in Developers & APIs
‎02-27-2023 02:07 PM
‎02-27-2023 02:07 PM
Hi,    I am making three calls    /networks/:networkId/wireless/clientCountHistory and  /networks/:networkId/wireless/clientCountHistory dashboard.wireless.getNetworkWirelessConnectionStats both for same time range (1day) and SSID   connection stats gives       "assoc": 99,     "auth": 922,     "dhcp": 68,     "dns": 8,     "success": 4753   and the client fails returns 180 unique Mac address   but client count only has a count of 11?    I think I might use "client connection status" to get me what i want but i would still like to know what "client count" is showing me as I know there are far more than 11 clients connected in the last 24 hours.  ... View more

Re: Python code not continuing when using try / continue

by DevilWAH in Developers & APIs
‎02-23-2023 04:07 PM
‎02-23-2023 04:07 PM
Sorry I resolved it, needed to move the looping though networks out side the "try" as it was failing on one network and ending the loop, using "try" after the "for net in networks:" and it works as expected ... View more

Python code not continuing when using try / continue

by DevilWAH in Developers & APIs
‎02-23-2023 03:59 PM
‎02-23-2023 03:59 PM
I have the following code that I am trying to test, when some error happen it continues as expected I know some of the net works it will loop through are not wireless but rather than check each i just want to try and if it fails continue. But when i run it i get the below error and it stops?    So to be clear i know why the call is failing and i expect that. But it is hitting the try: block, but rather than continue it stops the script? Why is this, other errors it continues with, is the the python library breaking out of the script and how can I over ride it. Yes i could always check that the network has wireless type but the "try" method would be nice to use.    ERROR wireless, getNetworkWirelessSsids - 400 Bad Request, {'errors': ['This endpoint only supports wireless networks']} Meraki API error: wireless, getNetworkWirelessSsids - 400 Bad Request, {'errors': ['This endpoint only supports wireless networks']} status code = 400 reason = Bad Request error = {'errors': ['This endpoint only supports wireless networks']}   SCRIPT      try:             for net in networks:                 print (f'Checking network:  {net["name"]}')                 ssids = dashboard.wireless.getNetworkWirelessSsids(net["id"])                 ssid = next((item for item in ssids if item["name"] == "WSP Corporate"),None)                 ccount = dashboard.wireless.getNetworkWirelessClientCountHistory(net["id"], ssid=ssid["number"], timespan=86400)                 cfailed = dashboard.wireless.getNetworkWirelessFailedConnections(net["id"],ssid=ssid["number"], timespan=86400)                 #last step is to out put the details to a csv                 for item in cfailed:                     #print (item["clientMac"] + "   " + item["serial"]+ "    " + item["failureStep"]+ "    " + item["type"] + "     " + item["ts"])                     csvdata = (net["name"],ssid["name"],item["clientMac"],item["serial"],item["failureStep"],item["type"],item["ts"])                     writer.writerow(csvdata)         except meraki.APIError as e:             print(f'Meraki API error: {e}')             print(f'status code = {e.status}')             print(f'reason = {e.reason}')             print(f'error = {e.message}')             csvdata = (net["name"],"ERROR","ERROR","ERROR","ERROR","ERROR","ERROR")             writer.writerow(csvdata)             continue         except Exception as e:             csvdata = (net["name"],"ERROR","ERROR","ERROR","ERROR","ERROR","ERROR")             writer.writerow(csvdata)             continue   ... View more

Re: Wi-Fi Clients being Disassociated due to "excess frame loss"

by DevilWAH in Wireless LAN
‎02-09-2023 07:57 AM
‎02-09-2023 07:57 AM
We have noticed a few things.    1. Upgrading to 29.x introduces a lot of aggressive roaming due to the load balancing. 802.11v.    2. If you look a lot of the frame loss is actuly aginst the "old AP" the client roams.from.AP 1 to AP 2. And then a short while later AP 1 reports frame loss and disconnect the client. So it is were the client has not gratefully disconnected from.the original.AP.    This is not all of the frame loss but if you filter a single client you will see association to new AP often come before frame loss to old.    What ever is causing the increased roaming it is a nightmare. We see clients with good strength and SNR roaming while the user is sitting still interrupting calls.    And visibility in the timeouts / thresholds and visibility to trouble shoot is not good.  ... View more

how to route traffic over non meraki peering links?

by DevilWAH in Security / SD-WAN
‎08-18-2020 06:28 AM
‎08-18-2020 06:28 AM
Hi   I have a MX68 device that has a non meraki peering to a physialc network (MX-A)   Secondly I have a secone MX68 (MX-B) that has a meraki peering to MX-A.    So all networks 10.0.0.0/8  are on the other side of the non meraki peering.    I would like MX-B to send traffic destined to 10.0.0.0/8 to MX-A, but I cant remember how to do this, by defualt MX-A does not advertise the toure it has to 10.0.0.0/8 to other meraki peers and I cant set a static route that has a peer as the next hop.    I did set the hub to be "default" route but this still does not work. Any ideas. ... View more

Re: Templates and Static Routing conflict issue.

by DevilWAH in Security / SD-WAN
‎07-23-2020 10:17 AM
1 Kudo
‎07-23-2020 10:17 AM
1 Kudo
Cheer I have got a responce back and Engineer so sorting it out.    I think it would be nice if we could "tag" these Default routes and have them exempt from unique checking our selves. or chose to validate agsint either or both  "assigned subnets" and / or "routes".   Becasue the validation is useful but this method in networking of using supernet routes for summarising is common. We use it in all out hub sites to route all private IP's back to the core.    ... View more

Templates and Static Routing conflict issue.

by DevilWAH in Security / SD-WAN
‎07-23-2020 05:32 AM
‎07-23-2020 05:32 AM
Can any one explain this.    In my template (very simple PoC) i have set up 2 vlans each set to use a unique Subnet in the from a /24 from the supernet 10.0.0.0/8    And this works fine.    But  also have a site to site VPN to the corperate network that has a satic route of 10.0.0.0/8    So my idea is that any /24 will get routed localy if its assigned and the rest will route back to the corperate network.    However as soon as a put in the 10.0.0.0/8 static route when i go to deploy a new network from the template I get    "no free subnets in 10.0.0.0/8" and it will not bind the template.    I know it a wa yto protect from over lapping IP's but in this case I would like it to work?      ... View more
Kudos from
User Count
DarNic
DarNic
1
RaphaelL
Kind of a big deal RaphaelL
4
cmr
Kind of a big deal cmr
2
AdBurl
AdBurl
1
Seshu
Meraki Employee Seshu
1
View All
Kudos given to
User Count
Tamas88
Tamas88
1
View All
My Top Kudoed Posts
Subject Kudos Views

Re: Wi-Fi Clients being Disassociated due to "excess frame loss"

Wireless LAN
5 10758

Re: Wi-Fi Clients being Disassociated due to "excess frame loss"

Wireless LAN
3 11250

Re: Templates and Static Routing conflict issue.

Security / SD-WAN
1 1253
View All
Powered by Khoros
custom.footer.
  • Community Guidelines
  • Cisco Privacy
  • Khoros Privacy
  • Cookies
  • Terms of Use
© 2023 Meraki