Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About jbates58
jbates58
Comes here often
Member since Dec 13, 2020
08-24-2022
Community Record
7
Posts
0
Kudos
0
Solutions
Badges
08-17-2022
02:09 AM
That's what i suspected, however there is some weird issue that we can not diagnose. The customers website occasionally doesn't work for people connected to the network that uses the Meraki DHCP. The corp. network just uses passthrough to the on-prem DHCP, and it NEVER has an issue. In terms of setup etc.. its pretty vanilla, basically just plug and play with 2 SSIDs configured, one for Corp. and one for Students. The only other difference is the firewalling blocking various things like streaming etc.. But we have configured the domain that has issues to be allowed in Umbrella, and also whitelisted in Meraki. And this is shown to be working, as the corp. network NEVER has an issue connecting. So i am thinking that it is something specific to the website, and it rejecting the connection because they have it locked down to only accept connections from the public IP of the customer, but that is only valid if there is something weird where the source IP is changed somewhere along the line. I will also note that they are not using anything like SWG or VPN etc... its just a super vanilla setup and deployment using their ISP provided modem.
... View more
08-16-2022
11:24 PM
Hi all, We have a customer that occasionally has issues with accessing a specific website. They have the MR44 units deployed for student use, and frequently they have an issue where the site wont work for them. They also have a corp. network on the same ap that is not in NAT mode, and NEVER has any issues. I am wondering if there is something in the Meraki DHCP NAT mode that will change the public ip that the requests are coming from? I know that the website in question has been specifically made to ONLY accept connections from the public IP of the customer. And the fact that the corp. network has never had an issue makes me wonder if there is something specific at play with the Meraki DHCP. I will also note, that it works sometimes. So the issue is sporadic and impossible to determine when will happen.
... View more
Labels:
- Labels:
-
Other
12-17-2020
06:07 PM
Thanks for that mate, that idea led me down an investigative path that worked. Although for the cost of the service, I feel that this isn't something that I should need to implement, especially if they have it (YouTube) specifically listed in their list of sites that can be blocked. However, none of those addresses ranges worked for me. But after some more investigation, I found that I was constantly getting another IP address range back so I just created a L3 rule to stop it, and so far in my testing, it seems to have worked. current working L3 rule to block YouTube is as follows DENY ALL 142.250.0.0/15 YouTube but for future reference, if anyone needs the other listed above, with appropriate CIDR references, they are as follows. 199.223.232.0/21 207.223.160.0/20 208.65.152.0/22 208.117.224.0/19 209.85.128.0/17 216.58.192.0/19 216.239.32.0/19 Issue resolved / Case Closed Cheers, Jason
... View more
12-13-2020
08:22 PM
This I could understand, however, I am able to start a new different stream every time I go to YouTube. That's not something that would be cached. so my understanding is that it should block it at that level because it will have to make another call out to get the content, and this should then be blocked.
... View more
12-13-2020
08:04 PM
yes, this was my first thought. but still not resolved. I have been at this for a couple of days now. The thing I don't understand, is how I can access YouTube from chrome in normal mode, but not in Incognito mode. It appears to be working as it should if I browse in Incognito. Cheers, Jason
... View more
12-13-2020
06:21 PM
I will also add a note that looking through the information i can find on the Meraki dashboard, I cant find ANY mention of quantitative YouTube traffic. I have left a stream running for about 1 hour now, to get the data transferred up, so that I can use that to determine the IP, or URL or something. but I get nothing. I used my device to watch Netflix, and then activated the rule mid stream, and within 5 min it was cut off, same for Spotify. and the traffic to those locations shows up, but I can not get you tube to show up at all.
... View more
12-13-2020
05:26 PM
Hello Everyone. I am attempting to get my MR47 to work with the content filtering. I have setup a Layer 7 F/W rule that DENY's all "video and music", however, I am having an issue getting to to work correctly. on my devices, with the DENY rule in place, i no longer have access to sites like Netflix or Spotify (so behaviour is as expected). BUT I can still access YouTube. both in the YouTube app and through the browser. something I have discovered though, is that I CAN NOT access YouTube on these devices if I use INCOGNITO mode. it seems that the firewalling works when the browser is in incognito, but not when its in normal browsing mode. I have tested this across multiple computers, and multiple devices as well, and the result is the same on them all. I have even created another separate explicit DENY rule for "youtube.com" and that still does not work. is there something that I have missed? as it all seems to be working other than this specific issue. I have attached a picture to show what I'm seeing. Cheers, Jason
... View more
