About AjitKumar

AjitKumar

Hi Matt I could not see that either on the Local status page / dashboard. I quick idea was to take a packet capture on Internet Port 2. There I got the MAC Address of the Source Interface. Hope this helps.

AjitKumar

I remember seeing this always. I guess.

AjitKumar

*** Happy Birthday Meraki Community*** I am so so so happy to be part of this celebration!!!

AjitKumar

Hi, I am not sure if this is a networking issue. One idea is to "Whitelist" the printer and try to printing. (Network-wide->Clients->[Select the printer]->Click on "Policy" Drop Down->Select Whitelisted)

AjitKumar

Hi I hope you are referring to following features. 1) Flow preferences Security appliance->Traffic Shaping 2) NAT & Port Forwarding Security appliance->Firewall

AjitKumar

Hi, We have 2 options here (that I can think of). 1) You can segregate APs in two groups (Use TAGs to group APs). Assign VLAN as Per the TAGs. https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/VLAN_Tagging_on_MR_Access_Points 2) You may Dynamically assign VLANs to users with the help of Radius server. https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/VLAN_Tagging

AjitKumar

Hi I understand API can be of some help here. (I may be wrong though) https://dashboard.meraki.com/api_docs#create-a-network One can create a script and call it multiple times i.e 3700. I believe this shall create empty network. We can add devices later. There are some more option in the documentation. Note: I have no knowledge of programming. Also I have never tried APIs. Lets wait for comments from someone who has already done this.

AjitKumar

Hi Philip Glad to see the Network diagram. This gives a better clarity. Thank you for sharing. I believe NAT shall be the option to expose any service/application to public. Bandwidth control shall not be the problem as this can be defined in a policy and you may apply the same on the selected device. If you are seriously looking forward to assign a public ip to the device. I understand "No NAT" feature is available with latest firmware. I have not implemented this. I shall request @PhilipDAth to suggest the configuration as per your topology. Lets wait for his comments.

AjitKumar

Hi Philip MX 100 is a Security Appliance (Firewall/UTM). MS 425 is a L3 Switch (Top end offer from Meraki with various Features. Ideally for Distribution). There is no MX425 product I am aware of. 2 x 2960 for core and other 4 x 2960 for Access. This seems fine. Why do we need public ip for core switches? What shall be the role of MS425? Where will you define VLANs? Core Probably. Who will be the gateway? I may have many more such crazy questions. Ideally one should need to define the roles of each device and shall design the network accordingly. Well this is my understanding with the limited knowledge I got. Certainly there are many community members to assist you with there exceptional experience.

AjitKumar

Hi Philip, That shall be easy. You may simply create a "Policy" with the desired parameters and apply the same on device A or Device B. Find the following url for more information https://documentation.meraki.com/MR/Group_Policies_and_Blacklisting/Creating_and_Applying_Group_Policies

AjitKumar

Hi, I hope below checks are made. 1. Ideally the Access Point shall be connected on a Trunk Port. 2. The Native VLAN on the Trunk shall have DHCP enabled and have Internet Access. (Unless you want to configure it manually from the Local Status Page) 3. Firewall If Any, on the Native VLAN shall allow access to Meraki Cloud. You shall also consider the inputs from Philip. 1. Verify the messages on the Local status of the AP. Specially "Ethernet", "Internet" and "Cisco Meraki cloud" sections under Access Point Details. 2. Verify the IP Address allocated to Access Point on your DHCP Server. Is the IP Address Pingable? Is the firewall blocking any kind of access for that IP? 3. Factory reset the device and try again. (Optional)

AjitKumar

Hi, I believe the smaller hardware will have low specifications as they are meant for less load/users. If not MX100 you may consider to upgrade to MX84 that may work out more economical. https://meraki.cisco.com/products/appliances#models

AjitKumar

Hi, In case you want to Ping / Access a service from internet for a server which is hosted in LAN. You can do either create a NAT Rule or do a Port Forwarding. Both the options are available in Security Appliance->Firewall. You may read the following documentation for complete information. https://documentation.meraki.com/MX-Z/NAT_and_Port_Forwarding/Configuring_1%3A1_NAT https://documentation.meraki.com/MX-Z/NAT_and_Port_Forwarding/Port_Forwarding_and_NAT_Rules_on_the_MX

AjitKumar

Hi Philip Congrats I believe this was one of your suggestion during Masters Session.

AjitKumar

Hi, "Track by IP" is not currently supported in combined networks. You need to "Split" the combined network under Organization->Overview. You may also refer to following urls for more information https://documentation.meraki.com/zGeneral_Administration/Organizations_and_Networks/Combined_Dashboard_Networks https://documentation.meraki.com/MX-Z/Monitoring_and_Reporting/Client_Tracking_Options

AjitKumar

Hi My understanding is Meraki have 2 Gateway products 1. MX.xx 2. Z.x MX.xx are security appliances meant for Small, Medium and Large Enterprise supporting two WAN Links. Z.x are for Teleworker (Work from Home) kind of environment supporting one WAN Link. Both of the products fully support Auto VPN. One can have combination of them or can have only MX.xx or Z1.x in a network.

AjitKumar

Hi Francis The following url may help you. https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Firewall_Rules_for_Cloud_Connectivity

AjitKumar

Hi, Excerpts from the followed url suggests "While in low power mode, the MR will disable its Air Marshal radio as well as one out of three transmit streams on the 2.4 GHz band (leaving two transmit streams still operating). Despite being in low power mode, the device can still supply full 802.11ac capabilities." https://documentation.meraki.com/MR/Monitoring_and_Reporting/Low_Power_Mode

AjitKumar

Hi Hope you have referred the following url https://documentation.meraki.com/MX-Z/Access_Control_and_Splash_Page/Customizing_the_Splash_page However as Adam said one should have HTML knowledge to customize.

AjitKumar · ‎07-20-2018

Hi, You may refer to following url too. https://community.meraki.com/t5/Security-SD-WAN/Need-internet-activity-log-of-each-client/td-p/7649

AjitKumar · ‎07-20-2018

Hi, Please check the following url. https://documentation.meraki.com/MR/Deployment_Guides/Wireless_Voice_Deployment_Guide_(CVD)#Microsoft_Lync_.2F_Skype_for_Business This seems to contain the list of servers and ports we need to work on. You may create a policy with the required information and apply the same on the desired device. Hope this helps you. [I am sure you know how to create and apply a policy]

AjitKumar · ‎07-17-2018

Hi Hope you have tried browsing on her PC enabling "incognito mode". Also how about Packet Capture?

AjitKumar · ‎07-17-2018

Hi Hope you have tried browsing on her PC enabling "incognito mode". Also how about Packet Capture?

AjitKumar · ‎07-16-2018

Hi This is challanging. I do not see any option on the Dashboard to achieve this. One Idea is to configure the SSID in bridge Mode. TAG the SSID with a VLAN. Limit the DHCP Pool on that VLAN.

AjitKumar · ‎07-16-2018

Hi What are your comments on Firmware? Hope you are running the latest stable Version.

AjitKumar

Community Record

Badges