Meraki

Mloraditch

I do not recognize and cannot find an API call with that name. Where did you find that? It may have existed in the past and been replaced by the live tools call for the mac table. They would be duplicative I believe.

SenaAK

Looks like this might be the case for us, but we went ahead and opened an issue with Meraki support. We have 15 sites and this is the only spoke that is giving us this warning.

alemabrahao

No, it is not necessary, just set the HUB priority order and it will work fine. https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/Meraki_SD-WAN#Hub_Priorities

cmr

!00% what @PhilipDAth says. All IoT equipment, such as printers, smart lights, door access control, CCTV (non Meraki) etc. should be placed in separate VLANs and access from those VLANs to other VLANs should be minimised. Access from those VLANs to the internet should also be minimised. It does take a little extra time to set up, but is well worth it in terms of reducing the attack surface of your site(s) and the possibility of data exfiltration by likely unmonitored devices.

ShaunCro

The Certificate Authority is no longer trusted by Android, the root cert that confirms the authenticity of the provider of the certificate used to encrypt the Wi-Fi connections has been removed by Android, this means that the device doesn't see the certificate as valid because it has no way of confirming that the authenticity of the certificate chain. Unfortunately we have 3 choices, 1. Host our own based on radius with our own trusted certs 2. Go with a 3rd party solution. 3. Wait for someone at cisco to realize they can use a cert from another provider to encrypt *.network-auth.com.

Hugovn

Yes, those are useful. Many thanks for your very quick actions.

Haertie

Sorry about that last sentence. I meant disabled, not enabled. 😉 I've been doing that for months. I also just noticed that since yesterday, the link for cookie settings is at the bottom right and no longer opens. Let's see if it's just another temporary bug.

roqe360

Con el software que esta en el dashboard no funciona, te mandan al TAC de Cisco, pero debes contar con licenciamiento anyconnect, para que te atiendan, pues no tengo. Lo que hice es bajar el software de Apple store, es para Ipad, sin embargo funciona bien en MAC. Sin embargo hay clientes que no les gusta la solución encontrada. Espero te funcione y la acepten

PhilipDAth

>Client list is showing external Public IP addresses. Have you got the internal circuit connected via any internal switch ports, either in an MX or an MS? This is a common trick for connecting two MX to one Internet port.

PhilipDAth

I have a bigger question for you - why do you need to give the access switch a static IP address? I can't remember when I last did this.

PhilipDAth

I second the Splash Access solution.

AlexP

If you'd like to open a Support case over this, we can forward along a bug report over it, since this seems to have been an oversight in the implementation.

AzeemHaider

I had same issue, do what @PhilipDAth saying, that solved my issue.

GavinMcMenemy

https://learn.microsoft.com/en-us/microsoftteams/devices/qos-on-teams-devices#quality-of-service-qos-with-microsoft-teams-rooms I scrolled to the top and didn't see an error. But I deleted the VLAN and it worked. got there in the end. No issues today either.

Gnana

Thanks for the inputs @Mloraditch

jimmyt234

I think the last time I looked at this (years ago) we didn't quality for access to the API. I will have another look and see if that has changed. Thank you!

PhilipDAth

Since the supplicant is not responding - you need to look at that end. For example, if it is a Windows machine, check the event viewer. Make sure the machine has a valid user/machine certificate. What are you using to issue your certificates?

rellek

Simple as getting a 4G only data plan...

AzeemHaider

I just went "Network-wide" --> Monitor --> Client --> and sorted out IPV4 address column and got leased IP list, thank you all

Cyrus777

No, actual Ethernet (copper) port. these are used for data center mostly but we use them for SAN connection between VMWare/Hyper-V and SAN storage. 9300 series are good for campus in access layer. they can't handle SAN traffic.

alemabrahao

In this case, you should contact ADVA support. This document may help. https://studylib.net/doc/27680941/manual-fsp150-ge114pro-fam

ShaunCro

So when you consent, it will only apply the consent to what is needed. And I think it being an app means that it has it's own built in connection strings, forgive me if I'm not understanding the question. I take it you setup a user account for the access assuming it needed an api key to do it. As far as I have seen, the SSO integrations don't require api keys or access. I've only recently started playing with SSO, but as far as I know and I could be very wrong here, but the token generated by the logon session carry's with it certain data that is passed to the requesting server via the users interaction. So there is do "direct" call from entra to meraki and vice versa. Everything is done via the browser session and the tokens contain the data that each need to cater for, and checks are done to ensure that the app requesting the access is authorised to. I started uat on my setup yesterday, and it's working so far. I do have to add more groups to the allowed to access for larger adoption, but I'm testing different scenarios at the moment and for security and what the benefit is and what hindrance the users could suffer.

DarrenOC

You won’t like the answer but have you considered a site survey? Whilst you may have great coverage etc now those new APs may operate differently. You may require more APs than you currently have or the reverse.

AlexP

This was historically true, but starting with MX19, we form route-based tunnels if IKEv2 with either health checks, or if eBGP over IPsec is in use.

JosueRuiz

The problem, as you mentioned, was that I had different port configurations. After having the same configuration, I was able to enable the Link Aggregation option for the desired interfaces. Thank you.

About alemabrahao

alemabrahao

Alessandro Abrahao

Community Record

Badges