Meraki

AlexL2

Yes i am waiting for the exact number of fibers, hopefully there will be enough 🙂 I also have a concern regarding the core switches where stacks of access will be connected, as the customer wants to have them connected in dual attach to each core switch (make sense) but the core switches will be installed in 2 different IT rooms in 2 different floors.. as these are 9300, there is no way to have stackwise virtual, should I consider EVPN ? Thanks,

alemabrahao

You can get those IPs into OpsRamp using a different method, API‑based discovery or OpsRamp’s Meraki integration. Introduction - Meraki Dashboard API v1 - Cisco Meraki Developer Hub Meraki | OpsRamp Documentation

alemabrahao

I suggest you open a support case.

alemabrahao

Yes, you can onboard a new C9300‑M directly with IOS XE 17.18.2. Cisco’s current minimum required software for onboarding Catalyst 9300 family switches into cloud management is IOS XE 17.15.3.

rsf1

Maybe try resetting the Starlink - I've got several MX68s w/gen 3 Starlink dishes working in bypass without issues.

Vishal07

i mean to say, if i configure warmspare using physical Lan port of MX95 and it gets internet via Fortigate. Would it be workable solution

AGH

Ok thanks for the explanations.

Mloraditch

It's just a media converter. It will not affect vlans or anything like that. Solely converts the signalling from light to electrical over copper and vice versa

Ryan_Miles

Sending you a DM

alemabrahao

To be honest, this doesn't make sense, because it's describing the ready-only role. This document seem to be wrong.

GIdenJoe

Yes there are some posts on this community where Philip explains how you can use SAML attribute claims to add a SAML attribute named "vpnpolicy" which then contains the string that matches the name of a Meraki group policy. You will however need to have Meraki support enable the Client VPN SAML group policy feature. Please refer here: https://community.meraki.com/t5/Security-SD-WAN/AnyConnect-SAML-Group-Policy-assignment/m-p/137691

ReginaPhalenge

Sure, I upgraded the switches to the required firmware, only to realize they were part of a combined network and needed to move them to a switch-only network. The switches reverted to the older firmware version, which I realized later. Upgraded them again, and it worked.

alemabrahao

Counted as a single camera. Meraki sells a specific single license SKU for the MV84X, such as LIC‑MV‑MULTCAM‑1Y / 3Y / 5Y, which is tied to the entire device rather than to each sensor.

PhilipDAth

Are you allowing the phones to get the updates directly from the Internet from the spoke, or are you using a full tunnel?

alemabrahao

Even when the AP port is correctly configured as a trunk and the native VLAN matches the AP's management VLAN, the crucial detail is that the SSID's VLAN tagging uses tagged traffic, while the AP's management uses untagged/native traffic, even if both use the same VLAN ID. Therefore, the AP may function fine (management), but the tagged client VLAN may still not reach DHCP correctly.

Brash

As has been said above, this is an expected behaviour. There is no way to 'disconnect' the access point upon WAN failure. Your best bet is to sure up your WAN connection with a more stable service or multi-WAN redundancy.

Brash

Layer 7 firewall rules don't differentiate 'Facebook Messenger' from 'Facebook', likely because Meta has so tightly integrated the two apps.

alemabrahao

Just follow what's in the slides you received and everything will be fine. I think there's nothing better than a practical test for you to validate the difficulties yourself. You have a plan, now you just need to execute it.

alemabrahao

Please check the documentation. https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Configuration_Guides/Networks_and_Routing/MX_Layer_2_Functionality#LACP_and_Link_Aggregation

KathleenJ

Hi you can do this via a sign on splash page. Using a Sign-on Splash Page to Restrict Wireless Access by MAC address.

BlakeRichardson

Try a different web browser.

PhilipDAth

This document might be a little more targeted. https://documentation.meraki.com/Platform_Management/Dashboard_Administration/Troubleshooting_and_Support/Troubleshooting/Packet_Capture_Overview

BlakeRichardson

One thing to bear in mind is that switches and wifi access points will still continue to pass traffic if there is a dashboard outage.

redsector

Maybe this helps? A change in radio this week:

Randomizate

Right, by default it is set to Enable and I have changed it to Disable so that it does not ask me for new authentications for users who are already authenticated.

About alemabrahao

alemabrahao

Alessandro Abrahao

Community Record

Badges