Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About Steven
About Steven
Steven
Getting noticed
Member since Feb 17, 2018
Jul 9 2019
Community Record
25
Posts
3
Kudos
0
Solutions
Badges
Oct 26 2018
2:23 PM
Our Meraki account engineer helped me come up with a workaround so now I've got it as close to 100% automated as I can get it while I wait for Meraki to expand their API to support General->Netflow and Firewall->Port Forwarding settings.
... View more
Oct 25 2018
4:34 PM
I would have thought this to be a no-brainer but it looks like the "Switch Ports" section of the documentation doesn't cover the LAN ports of security appliances like the MX64 and MX65. Am I missing something obvious or am I out of luck?
... View more
Labels:
- Labels:
-
Dashboard API
Jun 22 2018
6:07 AM
We're in the process of deploying MX to our branches and one of the things I routinely do is inspect the "VPN status" page of the hub under Security appliance -> VPN status . This is helpful to me during implementation because deploying the MX65 and connecting it to the ISP is separate from actually getting traffic to route across the IPsec tunnel that it creates to our hubs. By looking at this page I can see how many new sites have come up from one day to the next and I can also see whether or not a particular site is missing other configuration required to get the site fully broadband-enabled (by sorting Usage from low to high I can tell if a site is not fully enabled because the traffic is none to very low). I cannot find a way to pull this info down via API. Is this possible?
... View more
Labels:
- Labels:
-
Dashboard API
Jun 18 2018
1:21 PM
If I click on Network-Wide -> General I notice that the URL on my browser points to: https://xyz.meraki.com/net_container_name_partial/x/somestring/manage/configure/system_settings How are these parts (in bold italics) derived? Is there a way that I can retrieve the information on this page in an automated fashion such that I can glean parts of the page that I cannot otherwise retrieve via API?
... View more
Labels:
- Labels:
-
Dashboard API
May 22 2018
6:23 PM
I'm a bit surprised at how much is missing from the API compared to what can be done via the Web UI. One thing that really disappointed me was discovering, today, that there's a rate limit on the API calls (5 per second per organization) and that it apparently cannot be tuned. That was like a kick to the gut. That's not going to scale very well. We have thousands of network containers and polling that information in serial fashion takes way too long. I was already working on scripting that would run dozens of threads concurrently but that's way down the priority list now. One thing that would be really nice to see is a object returned by the Networks pull that includes a time/date stamp for the last time any configurable attribute of the parent container or any child container (such as a device) changed. 99% of my iteration work would disappear immediately (unless somebody made bulk changes).
... View more
Mar 18 2018
5:52 AM
Thanks. I curious about the Netflow configuration on the General page of the Network-wide section. This doesn't appear to be an option that I can configure via the API and it doesn't seem to be something that survives the clone from template process. This seems weird to me. Am I missing something or is this really not available to be configured via the API?
... View more
Mar 17 2018
8:38 AM
From the Meraki Dashboard, when I click on Help -> API Docs I am redirected to a site that includes a lot of useful examples of ways to retrieve data or create/modify configurations. Is this all-inclusive or is there a document which covers an even wider and deeper level of things that can be done via the API? I'm wondering because there are things I cannot find in the documentation and I'm wondering if it's something I can still verify/configure through API (for example, some of the things under Network-wide -> General).
... View more
Mar 10 2018
1:53 PM
@MerakiDavewrote: Unfortunately no, not today, the API call passes a single data structure for a single static route, so unfortunately it will require one API call per route today. Certainly easy enough to set up a for loop in your script, but it will be individual API calls. Make a wish and I'll do the same, I recently had to create some networks with about 2 dozen statics, and ran into this, cannot do it from a single call, unlike L3 FW rules for example, where you could place dozens or hundreds of FW rules with a single API call. Just not there today for statics. My kingdom to only have to create a couple of dozen statics. I'm looking at between 500 and 1000. While we're wishing for stuff, how about policy-based routing? It's only been a common thing for about a decade or more. Would absolutely solve all of my problems right now.
... View more
Mar 10 2018
1:51 PM
1 Kudo
@Uberseehandelwrote: @Steven Have you considered using a list structure and iterating through it . . . route_dest = ['static_1', 'static_2', . . . ] for route in route_dest: . . . . . . . . For now this is what I've done (in my own backwards way) due to the limitation I seem to be running into. It's slow but as long as it's automated it shouldn't be a problem.
... View more
Mar 10 2018
12:32 PM
I tried creating a file like so: [ {static1...}, {static2...}, {staticN...} ] And then I tried using curl with the -d @filename option to add multiple statics to a network but it doesn't work. I can add a single static route using this method but I'm hoping to be able to do it with a single call if possible. I have a lot of routes I need to add.
... View more
Feb 19 2018
12:21 PM
@PhilipDAth wrote: By default AutoVPN traffic permits all traffic. The firewall for this are located: Security Appliance/Site to Site VPN/[scroll down to Organization-wide settings] There's a wrinkle to the way this is being deployed that might have an impact on this recommendation. The MX65 is in the path of a DMVPN solution but is only providing encryption. In other words, the GRE tunnels are based on Cisco routers and terminate on ASR head end routers in each of our data centers. Traffic to/from the Meraki mgmt network trombone on the 2921 at the branch. For instance, traffic inbound to the branch (from the DC) would follow this path to get the Meraki MGMT network: DC -> HE (GRE) -> MX600 -> Internet (IPsec) -> MX65 -> (GRE) -> 2921 -> MX65 (native IP) -> MGMT_Net. The only network in the tunnel is a /30 between the MX65 and the router and effects only the GRE traffic.
... View more
Feb 18 2018
5:54 AM
@PhilipDAth wrote: Does operations connect via a WAN port or an internal vlan? If they connect via a WAN port is it via AutoVPN ? The MX65 is in NAT mode and performing AutoVPN functions and Ops is reaching the Mgmt network via the IPsec tunnel.
... View more
Feb 17 2018
5:46 AM
We have recently undergone the process of converting our MX65s from Passthrough mode to NAT mode and in so doing we have broken communication between certain devices. For instance, each MX65 has a VLAN for Meraki Mgmt (VLAN 30 for APs, WIPS) and wireless clients (VLAN 40). In passthrough mode, Operations was able to communicate directly with APs and WIPS on the Mgmt network (from Data Center -> Local Mgmt VLAN). After converting they cannot. In passthrough mode you're allowed to configure rules Inbound and Outbound. In NAT mode you can only configure Outbound rules and under "Inbound" it just states: "Inbound traffic will be restricted to the services and forwarding rules configured below." The rule we have for Mgmt VLAN, under the "Outbound" section, is: Allow Any-Proto Src-Mgmt-Net Src-Port-Any Dst-Any Dst-Port-Any Do I also need to create another rule like this (reverse of the first rule)? Allow Any-Proto Src-DC-Nets Src-Port-Any Dst-Mgmt-Net Dst-Port-Any I really don't get the significance of the term "Outbound" in the case where the mode changes from passthrough to NAT. Outbound in relation to what? I don't get why it changes the behavior of the "Inbound" rule section under Security Appliance -> Firewall
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 7029 |
© 2024 Cisco Systems, Inc.
