Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About trunolimit
trunolimit
Building a reputation
Member since Mar 17, 2018
Dec 21 2020
Community Record
104
Posts
11
Kudos
1
Solution
Badges
Mar 25 2020
1:22 PM
So here's a question: you think its less resource intensive to implement group policies rather than a bunch of firewall rules?
... View more
Mar 25 2020
12:27 PM
there is 1 printer that they all need to talk to but i think that could be handled by a single allow statement.
... View more
Mar 25 2020
12:16 PM
So here is a list of vlans I have. I need to keep them all from talking to each other but still access the internet. What's the most efficient way to accomplish this?
... View more
Feb 11 2020
7:06 PM
That's strange. On the iPads I was able to restore from iCloud and the iPads kept their supervisor settings. The iPhone however didn't.
... View more
Feb 11 2020
2:20 PM
I created a profile that I use to provision iOS devices and enroll them into MDM. I use this to do about 6 iOS devices. 2 of them are fine yet 3 of them have the option to leave remote management. Why is that? The 3 that have this option are iOS 12.4.5 because this is the highest iOS version they go up to. The ones that do work are on iOS 13.3 what gives?
... View more
Feb 11 2020
10:28 AM
I've never even been on that page. Cool. Any webinars available to make heads or tails of all that data?
... View more
Feb 11 2020
9:46 AM
What are the steps I need to take to get data back after I've used apple configurator to set up MDM in supervisor mode? Is it: 1)Create a backup through iCloud 2)Wipe the iOS device 3)Use Configurator to provision the iOS device 4)Run through the setup and when prompted, restore from the iCloud back up? 5)profit?
... View more
Labels:
- Labels:
-
Enrollment
Jan 17 2020
9:30 AM
where can I check the RX TX stats per client or per MR? I want to see if theres significant transmission loss on a wifi client.
... View more
Dec 18 2019
1:07 PM
OK thanks. using the push notification certificate seems to works.
... View more
Dec 18 2019
12:43 PM
Hello, I have an apple developer account. how can I use that to generate a certificate to use with MDM to gain supervisory mode? This is what I get when I click on certificates. Certificates, Identifiers & Profiles All Certificates Create a New Certificate Continue Software Apple Development Sign development versions of your iOS, macOS, tvOS, and watchOS apps. For use in Xcode 11 or later. Apple Distribution Sign your apps for submission to the App Store or for Ad Hoc distribution. For use with Xcode 11 or later. iOS App Development Sign development versions of your iOS app. iOS Distribution (App Store and Ad Hoc) Sign your iOS app for submission to the App Store or for Ad Hoc distribution. Mac Development Sign development versions of your Mac app. Mac App Distribution This certificate is used to code sign your app and configure a Distribution Provisioning Profile for submission to the Mac App Store. Mac Installer Distribution This certificate is used to sign your app's Installer Package for submission to the Mac App Store. Developer ID Installer This certificate is used to sign your app's Installer Package for distribution outside of the Mac App Store. Developer ID Application This certificate is used to code sign your app for distribution outside of the Mac App Store. Services iOS Apple Push Notification service SSL (Sandbox) Establish connectivity between your notification server and the Apple Push Notification service sandbox environment to deliver remote notifications to your app. A separate certificate is required for each app you develop. macOS Apple Push Notification service SSL (Sandbox) Establish connectivity between your notification server and the Apple Push Notification service sandbox environment. A separate certificate is required for each app you develop. Apple Push Notification service SSL (Sandbox & Production) Establish connectivity between your notification server, the Apple Push Notification service sandbox, and production environments to deliver remote notifications to your app. When utilizing HTTP/2, the same certificate can be used to deliver app notifications, update ClockKit complication data, and alert background VoIP apps of incoming activity. A separate certificate is required for each app you distribute. macOS Apple Push Notification service SSL (Production) Establish connectivity between your notification server and the Apple Push Notification service production environment. A separate certificate is required for each app you distribute. Pass Type ID Certificate Sign and send updates to passes in Wallet. Website Push ID Certificate Sign and send updates for Websites. WatchKit Services Certificate Establish connectivity between your notification server, the Apple Push Notification service sandbox, and production environment to update ClockKit complication data. When utilizing HTTP/2, the same certificate can be used to deliver app notifications, update ClockKit complication data, and alert background VoIP apps of incoming activity. A separate certificate is required for each app you distribute. VoIP Services Certificate Establish connectivity between your notification server, the Apple Push Notification service sandbox, and production environment to alert background VoIP apps of incoming activity. A separate certificate is required for each app you distribute. Apple Pay Payment Processing Certificate Decrypt app transaction data sent by Apple to a merchant/developer. Apple Pay Merchant Identity Certificate A client TLS certificate that is used to authenticate you to Apple Pay Payment Processing Servers You need to accept the agreement 'Apple Pay Platform Web Merchant Terms and Conditions'.Review Agreement
... View more
Labels:
- Labels:
-
DEP
Nov 19 2019
11:17 AM
OK. ugh, there's no ban X app functionality? And then unban X app?
... View more
Nov 19 2019
10:07 AM
yeah I was afraid of that. if the app is in use will these options kick the user off the app?
... View more
Nov 19 2019
9:10 AM
Hello Everybody, My client wants the ability to disable and app on his kid's iPhone whenever they are misbehaving. He wants to then renable the app when he feels they've earned it. Is this at all possible through MDM?
... View more
Labels:
- Labels:
-
Apps
Nov 19 2019
9:07 AM
Just to close the loop, the issue stems from Sonos building their own Mesh network. If two units are hardwired and they're in close proximity to each other to build a mesh it causes a network loop that sometimes STP doesn't deal with. Sonos does not give you the ability to turn this "feature" off. Hopefully anyone else who lands here searching for a solution to this problem find this helpful.
... View more
Nov 1 2019
7:49 AM
1 Kudo
That’s amazing! I wish I knew about that webpage a long time ago. My equipment is the older gen play 5. The one that has the Sonos logo on the bottom bezel. Maybe this gen has a bug that can’t have more than 1 hardwired. The whole experience and all the others I’ve installed have just soured me to the whole product line. Plus I’m kind of spoiled in that I’m an AV installer so I’ve heard what a really good pair of speakers that are way less expensive sound like. But not everyone can run wires so Sonos really is some people’s only solution. I do appreciate that they in clubes IR control on the sound bar.
... View more
Oct 31 2019
5:07 PM
Got it to work. You are correct in that more than one Sonos CAN NOT be hardwired. what I did was Step 1: connect 1 sonos hardwired to my switch. Go through the set up process. Step 2: Put that sonos on the wifi using the app. Step 3: Unplug the first sonos Zone and once it switches to the wifi hardwire the second zone. Step 4: set that up using the app and repeat step 2 and 3 as needed for how ever many zones. Sonos has its place in the market but for us elevated folk sonos is not very good.
... View more
Oct 29 2019
2:49 PM
I have 1 client that brought in an AV guy who clearly didn’t know anything about networking or WiFi in general. He outfitted a small office building with Sonos and Sonos bridges. Then the system would only sometimes work. This was done without our knowledge. We were called in because the WiFi quality dropped significantly for our customers. We were flabbergasted to say the least. In the middle of New York City WiFi is crowded enough. By adding over a dozen Sonos units you’ve rendered the 2.4ghz range useless. so we hardwired everything and that’s when the real fun began. We noticed these things would decide how to network on their own. They would sometimes ignore the Ethernet they were plugged into in favor of the WiFi. We contacted Sonos and asked how to turn off the WiFi and they told us “CUT THE ANTENNA “. This is what their tech told us. looks like I have my work cut out for me.
... View more
Oct 28 2019
9:57 PM
I’m having this issue with a play:5 I originally had it connected to a net gear switch. When I plugged it in my entire network was brought down. I decided to connect it to my MS in order to get some packet captures but I get the UDLD error. im thinking it’s an issue with how Sonos implemented its networking.
... View more
Oct 1 2019
5:27 AM
Unfortunately I never did. My understanding of IP helper was wrong. IP helper only facilitates DHCP across subnets. unfortunately Sonos just doesn’t work across subnets. what you can do is set up a guest SSID but use firewall rules to stop anyone from accessing any resource other than the Sonos.
... View more
Sep 24 2019
12:19 PM
Hey Philip, I'm also having this issue where some win10 machines work and others don't. I tried to google rasphone.exe to see what is that command. could you possible explain what rasphone.exe, how to use it, and why does it fix this issue? thanks a bunch.
... View more
Aug 15 2019
8:33 AM
I guess my confusion comes from if I plug in a computer to a Trunk port on a catalyst the computer doesn't work. This is expected behaviour since a User end device wouldn't be expected to read 802.1q tagged frames. But if I plug that same computer into a Meraki Trunk port it works just fine. So my conlcusion was that Access port in Meraki means Access port but Trunk actually means Trunk AND Also Access port in that it will strip VLAN tag on egress if it sees the device attached does not read 802.1Q.
... View more
Aug 15 2019
6:40 AM
1 Kudo
Hello All, I come from a cisco IOS background. On IOS you'd have 4 Switchport options dynamic desirable dynamic auto access trunk If you set up a port as a trunk port and plugged a client that does not support dot1q tags you wouldn't get any traffic going through that port. Further more you could control wether or not the port autonegotiated to a Trunk if it saw a DTP packet come through. Fast forward to Meraki and You've only got 2 options, Trunk and Access. There are some bnetwork devices that are capable of reading Frames with intact VLAN tags. On IOS I would just put it into Trunk mode and I'd know for a fact if that device can read VLAN tags or not because it would work or it wouldn't. I can't do that on Meraki becasue I have no way of knowing if a Trunk port autonegotiated to Access mode (the VLAN tags are stripped on egress) or if it's an ACTUAL Trunk port (VLAN tags are not stripped on egress). Does Access port and Trunk port just fundimentally mean different things in the MEraki world? Access means only a single VLAN alowed while Trunk just means multiple VLANs are allowed? Rant: Has anyone here been through a CCNA or any kind of Cisco training? Why can't meraki (or do they already?) offer a similar comprehensive training where you are taken down to the packet level and shown exactly how meraki habdles traffic and best practices. The meraki training I've gotten is just GUI click this to do this and that. No explination of what the router or switch is actually doing under the hood.
... View more
Jun 11 2019
1:25 PM
First let’s take Carl back to the days before VLANS. In an office, lets say you wanted to separate the accounting department's network traffic from the creative department's network traffic. You’d have to buy and install a separate switch for each department because this was the only way to make sure someone in the opposite department couldn't see the others network traffic. Also, if you wanted to move one person from accounting to another building, there's no way to keep this separation of traffic from different physical locations. The solution came in the form of VLANS. Technically speaking all a VLAN is, is a Tag added to each ethernet frame as it enters a port on a VLAN enabled switch. This Tag is removed at the egress port. The two standards for these Tags are 802.q and ISL although ISL has really fallen out of use because it's cisco proprietary. Having each piece of traffic marked allows a switch to direct where traffic is allowed to go and not allowed to go. So if we now want to make sure that accounting traffic stays separate from the creative department's traffic we can apply a VLAN tag to each departments traffic and tell the switch where everything is allowed to go. We can even expand this control beyond 1 physical location so if a single member of the accounting team moves to a new building all I have to do is find the port that person is connecting to and apply the accounting department's VLAN to it. That employee is now part of the accounting department's network without much effort or added cost of rewiring the network.
... View more
Mar 26 2019
5:22 PM
1 Kudo
Well that's annoying. OK just opened a case. will report back if a solution is found. seems like a few people have had this issue before but no solution I've found.
... View more
Mar 25 2019
5:38 PM
I'm trying to supervise some iOS devices but this error keeps popping up. What gives? A connection to the server could not be established. [MCInstallationErrorDomain – 0xFA1 (4001)]
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 3480 | Jul 1 2020 4:22 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 9741 | |
| 2 | 68930 | |
| 1 | 13858 | |
| 1 | 3444 | |
| 1 | 3482 |
© 2025 Cisco Systems, Inc.
