About AjitKumar

AjitKumar

Hi @SCC Going by the definition of NGFW. I may say "YES". Recent introduction is HTTPS inspection. However I follow @PhilipDAth on his views on HTTPS Inspection. https://community.meraki.com/t5/Security-SD-WAN/MX-HTTPS-Inspection-Coming/m-p/45870 However for additional security we recommend Cisco Umbrella to our customers which can be easily integrated with Cisco Meraki Solutions. You may check the following url for complete information on Cisco Meraki Firewall. https://www.syndicateinfo.com/post/why-cisco-meraki-firewall

AjitKumar

Hi @ShadowoftheDark I understand we are discussing about "Non-Meraki VPN" Confguration. Constructing tunnels with Meraki Auto VPN (between Meraki Devices) or Non-Meraki VPN (between Meraki and Non Meraki) are kind of easy. I believe the logs displayed on the Dashboard shall be relevant to your VPN only. I could see "failed to get sainfo" event Did you happen refer to following url (Lists down most of error events) https://documentation.meraki.com/MX/Site-to-site_VPN/Troubleshooting_Non-Meraki_Site-to-site_VPN_Peers Event Log: "failed to pre-process ph2 packet/failed to get sainfo" Error Description: The tunnel can’t be established and the following error is recorded in the event logs in the Dashboard “msg: failed to pre-process ph2 packet (side: 1, status: 1), msg: failed to get sainfo.” Error Solution: This can result from mismatched subnets in the IPsec tunnel definitions, typically a mismatched subnet mask. Check to be sure that the local and remote subnets match up on each side of the VPN tunnel.

AjitKumar

Hi @Vidya Could you please explain a little more about the requirement? I hope you are not referring to the Network-wide > Topology Feature.

AjitKumar

Hi @Htaha I understand this should be absolutely fine. Whether POE / Non-POE / 24 / 48 Port. I understand we can stack them together with "No issues". You may check the following Url for more information on Stack Compatibility & configuration. https://documentation.meraki.com/MS/Stacking/Switch_Stacks

AjitKumar

Hi @martijnwireless The only information I could search is the following. https://meraki.cisco.com/lib/pdf/eol/meraki_eol_mr34.pdf Seems MR42 is a replacement of MR34. So I believe "End of Sale Date" ie. October 31st, 2016 seems to be "Release date" for MR 42. I may not be correct though.

AjitKumar · ‎09-03-2019

Hi @Mule Could you please verify the "MAC Address" of the "Whitelisted" machine? Is it correctly Identified on the Dashboard?

AjitKumar · ‎09-03-2019

Hi @loudmog I do not have any experience with Ubiquiti EdgeRouters. However I am just trying to share a bit of information about Meraki Client VPN. Meraki client VPN works on, UDP 500 and 4500. Could you please make sure these ports are available for the service to work? Also could you please share the error message you see while connecting? You may also check the following Url (This documents most of the common errors with Meraki Client VPNs) https://documentation.meraki.com/MX/Client_VPN/Troubleshooting_Client_VPN

AjitKumar · ‎08-30-2019

Hi @samgbuyi This url falls under the category of "Streaming Media". I see the following Options. Security & SD-WAN >Content Filtering > Blocked website categories > Streaming Media or Security & SD-WAN >Content Filtering > Blocked URL patterns > o2tvseries.com or Security & SD-WAN > Firewall > Layer 7 Firewall rules > Deny HTTP hostname > o2tvseries.com You may test the above settings and apply the desired ones. This can be applied globally or we may create a group policy (Network-wide > Group Policies) and apply to the respective client. If you have already created a "Group Policy" and applied it on devices. Please cross check the "MAC Address" + Applied "Policy" on the device under Network-wide > Clients.

AjitKumar · ‎08-27-2019

Hi @Prashan Meraki offers us default options of "2 Hrs" "1 Day" "1 Week" "30 Days" to filter Analytics. For any custom requirement I believe we need to build our own application using SysLog and APIs. For more information on Log Retention Kindly check the following Url. https://www.syndicateinfo.com/post/meraki-logging-retention-period

AjitKumar · ‎08-26-2019

Hi @Prashan Could you please try filtering "all" settings?

AjitKumar · ‎08-26-2019

Hi @Bala @BlakeRichardsonsuggestion is 100% correct. Since the solution is Centrally Cloud Managed and GUI based. The Dashboard offers you a nice feature of selecting Devices/Network/Version/Time to upgrade the firmware.

AjitKumar · ‎08-26-2019

Hi @Wong I believe this may not be possible. One idea could be. You may install a "Router" between the ISP and MX84s and share the ISP with both MXes.

AjitKumar · ‎08-26-2019

Hi @Prashan Is the L7 Rule not working? If not you may block the host name. Check the following url for iOS. https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Blocking_or_rate_limiting_iOS_updates For Android I believe above will be challenge as they have various sources. I believe Cisco Meraki EMM may help you on this provided you "OWN" the devices.

AjitKumar · ‎08-26-2019

Hi @Sudhir I understand in your scenario the best possible method could be integrating the MX in "Transparent Mode" as suggested by @ww . When in passthrough mode, the MX is best used for in-line: Layer 3/7 firewall rules, traffic shaping, and analysis Network asset discovery and reporting Intrusion detection Security and content filtering Client and site-to-site VPN

AjitKumar · ‎08-23-2019

Hi @Prashan I am not aware of any document or information except the following content, stating the "List of Software's" included in this Category. "The Cisco Meraki cloud-based application signature database is constantly updated to identify new and changing applications, without requiring the administrator to download and install software updates. The Cisco Meraki cloud-based architecture continually learns based on activity from Cisco Meraki's thousands of customers and millions of users, increasing the accuracy and precision of application fingerprints."

AjitKumar · ‎08-22-2019

Hi @Prashan I understand L7 Firewall rules should help you to achieve this. On the dashboard go the following option and Deny the Category. Wireless > Firewall & traffic shaping > Select the desired "SSID" > Block applications and content categories - Layer 7 firewall rules > Software and anti-virus updates

AjitKumar · ‎08-20-2019

Hi@Lakshmikanth Lets try to update the firmware.

AjitKumar · ‎08-19-2019

Hi Johnny, I believe the default "Alerting" process of Meraki includes information about the "Network" and the "Device" in most of the cases. However Webhooks and SNMP do offer better reporting options. You may consider referring following Urls for more information. (If already not) https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP_and_API https://developer.cisco.com/meraki/webhooks/#!introduction/overview

AjitKumar · ‎08-13-2019

Hi @dmiss The Meraki documentation suggest the following reason for this event. 802.11 disassociation: client has left AP - A client informed the AP that it should no longer keep the client in its association table. You may see this if the client has potentially gone into a hibernate state, a powered down state, or the client may have chosen to roam to another AP. Do you think this could be a reason? Few suggestions. Try " Disabling band steering " if already not. If you see lots of SSIDs in your Air Marshal scans. Try setting the Channel width to 20 if already not.

AjitKumar · ‎08-12-2019

Same here @PhilipDAth . I am in the middle of LDAP integration.

AjitKumar · ‎08-11-2019

Two Ideas. 1. Try browsing in Privacy Mode / Incognito Mode 2. Try updating MX65W Firmware (If Already not)

AjitKumar · ‎08-11-2019

Hi @superfly Could you please toggle the values for "Captive portal strength" and do a test? Security & SD-WAN > Access Control > Captive portal strength

AjitKumar · ‎08-11-2019

@SeshuAwesome. Thank you for sharing.

AjitKumar · ‎08-11-2019

Hi Mike, You may also refer to following Url https://documentation.meraki.com/MS/Other_Topics/MS_Switch_SFP_and_SFP__Overview Excerpts from above Url The last 4 ports on the MS22, MS22P, MS220-24, and MS220-24P, numbered 21-24, are combination ports that are shared between the RJ45 ports and the SFP interfaces. Only one of these two ports may be in use at a time. For example, if an ethernet cable is connected to the RJ45 port 24 then the SFP port 24 cannot be used. If both ports are occupied, the RJ45 port will take priority.

AjitKumar · ‎08-11-2019

Hi Sean, Meraki API can be be used for may purposes. Do check the following Url (If already not). This lists down all the possible functionalities https://dashboard.meraki.com/api_docs

AjitKumar

Community Record

Badges