Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About BadAssBassinD
BadAssBassinD
Here to help
Member since Oct 3, 2020
Dec 14 2022
Community Record
6
Posts
0
Kudos
1
Solution
Badges
Dec 14 2022
11:09 AM
Philip, We are currently on 5. most chrome browsers auto update. I've seen in many cases they are using direct streaming. Yes we have a content filter, anti virus ... etc. but getting our dep to disable that would be like asking god to come visit earth. LOL ...
... View more
Dec 13 2022
6:17 AM
Hello, I am hoping someone can give me some insight to this persistent issue. We have well over 400 MV series cameras, 12s, 22s, and 72 series hardware. Internally we operate them off a pc so a security designee can view a camera or two to allow a visitor to enter the building safely, naturally. In almost every location, a camera on a local subnet, where it is being viewed, will either display a black tile/or go black. The users then complain, it is a security issue, b/c they cannot see the entrance door or visitor. Most times these cameras are being viewed on a computer and that is it's sole purpose to allow them to open up a few tiles to view entrance doors etc. Users will put in tickets explaining the camera is not viewable, however when i see these tickets, I am then able many times to view the camera in question across the network in another building but locally on that computer it shows a black screen. Can someone please help me understand why. I have had this issue consistently and i have not found a solid reason as to why this keeps occurring. Based on the requirements from meraki, a computer with an i5 and 4 gigs of memory should be able to support a 2 to 4 tile video wall with little lag, or jitter or video loss. Please help ?
... View more
Oct 22 2020
3:28 PM
I currently have 1 nps server authenticating district owned laptops to our wireless via machine 802.1x authentication. I also have 1 nps server authenticating devices via user auth using domain credentials for our BYOD network. The last part of this problem is how can I accomplish the same for our chromebooks using our nps server and machine authentication ? Can this be accomplished via google admin console ? How would these chrome devices auth if they do not have a machine account ? I do not believe I have to change anything on my NPS server side, except to maybe download the cert and deploy it to our chrome devices and I know we'd have to change some things in the admin console but any help or guidance would be appreciated.
... View more
Oct 6 2020
6:02 AM
Thank you for providing this insight, it's very definitely helpful, but I do have another question for you Philip. Currently I am using wpa2-enterprise mode w radius for our district/school owned devices. That nps server has the same cert as our domain cert so each device trusts the NPS since is forced onto each machine when it joins the domain. If I chose to employ this method for the BYOD users and not do splash page auth, what do you recommend for certs? Do we need to purchase one or can we use a *wildcard ? I'm a little unclear as to how to do this since you cant push certs to users devices. I guess you can give them a choice either accept and associate or don't and then do not. Meraki states that they encrypt everything when the exchange of password etc is going to and from meraki to NPS server but is the cert even needed then if they are this secure ? I also found that for the Slash page I can set it to only make users Auth once a day or I can change the frequency. Personally I don't think this is a big deal or inconvenience because most of these users are students and they're classes last about an hour just my opinion on that.
... View more
Oct 5 2020
8:10 AM
Thank you PhilipDAth, I think others would like to use the slash page it's not really my choice, but why wouldn't you recommend using that ? Also - We are using WPA2-Enterprise with radius for district owned devices and 802.1x. Once each machine joins the domain after it is imaged or via gp users can connect b/c the cert is automatically installed on each device. With slash page auth, which I think I have gotten to work correctly, NPS cannot push down a cert to devices such as an iPhone, a users mac, a users pc laptop, or an android phone, however after reading the article you mentioned it seems fairly secure using the splash with radius because information is sent and encrypted. How else would you suggest creating a BYOD network which needs to allow domain users to authenticate using their domain credentials ? This would strictly be for personal devices and we would not be placing them on our lan, only using meraki dhcp to keep them off our lan. Thank you.
... View more
Oct 3 2020
4:49 PM
I have begun to tackle the confusing effort of trying to implement a byod wireless network in the place of my employment. The problem is no one really knows the requirements or wants to decide what is exactly needed so I can only assume which just makes it more confusing. My opinion of what is needed is to provide easy and secure access to the internet for all users. We have 3 different domains staff, students and an admin domain. Devices that will be used will include, iphones, androids, macs and pc’s. We will eventually be using iboss to filter users according to domain credentials. I have already set up an NPS server with the standard settings according to the meraki guide to implementing NPS. I only created one policy, which is user based authentication – it would allow all three domains students, staff and admin access to gain internet access via the slash page as long as they have a valid user account. When I test the connectivity in the Radius settings for slash page, using the servers external ip it states that the server can communicate with meraki cloud We have school own devices on a different lan and each school owned devices automatically gets a cert once it is joined to the domain but I seem to be getting different results using the slash page and authenticating user groups vs machine auth. My question is, I’ve seen so many ways to do this I’m not sure of the easiest but I think I have all the pieces just don’t know how to fit them together properly, can anyone help me find the correct but secure settings to use. I am using Microsoft a 2019 NPS Server and MR42 Meraki aps, I would like to authenticate three different domain user groups on an array of devices all from a splash screen and put them on a natted meraki network (not on our internal lan) Any help would be greatly appreciated.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 3045 | Oct 6 2020 6:02 AM |
© 2024 Cisco Systems, Inc.
