Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About MFuchs
MFuchs
Here to help
Member since Mar 20, 2018
Nov 18 2021
Community Record
30
Posts
0
Kudos
1
Solution
Badges
Nov 18 2021
3:47 AM
It turned out to the following issue: when the user has a user-certificate, it is used by the meraki agent as the authentication against ios.meraki.com. So the Agent fails when trying to find the network: Transport Layer Security TLSv1.2 Record Layer: Encrypted Alert Using a windows user that does NOT have a user-cert (as a service user for the meraki agent) for installing and adding the agent to the network works as expected and after a short while (and when you have sufficient licenses left) the client appears in the dashboard after a short while.
... View more
Nov 15 2021
12:24 PM
Windows Firewall is deactivated. mad unmentioned above I can see the traffic flow on the gateway firewall and also took a trace. i think it’s some kind of cert-auth-problem or else … no traffic-flow Problem …
... View more
Nov 15 2021
8:27 AM
Yes, you're right.that's what i meant. But the devices / servers do NOT appear there... as it they would not register...
... View more
Nov 15 2021
6:02 AM
Hi ! We set up a new Windows 2019 domain controller and wanted to install the SMAgent (3.1.1) on this machine. Now the setup fails with the following error: Network connectivity is give, nothing is filtered. I wrote a packet trace and saw that the client connects to ios.meraki.com and presents a user-certificate from the local CA. This causes an Encrytion Alert and terminates the session, thus resulting the SMClient noch to connect. We discovered that windows authenticates with the certificate of the user. So we logged on with a service user and installed the SMClient and entered the network id which now worked fine, BUT: The client does not show up in the clients pane in the dashboard. Does anyone have any idea on how to install the client correctly or how to get around this issue ?
... View more
Labels:
- Labels:
-
Other
Sep 15 2019
11:43 AM
Hi ! Thanks your quick replies to my question ! I'm stuck in a datacenter move, so I'll try this afterwards. But that's exactly the right idea for what I'm trying to achieve, so thank you very much in advance !
... View more
Sep 2 2019
4:50 AM
Hi ! I need to separate iOS devices by iPhones and iPads. Until now i did that by tagging iPads manually. So i would need to tag iPhones manually, too. The goal is to roll out apps only for iPhones or ony for iPads. How do others do this ? Sadly there is no functionality to filter from devicetype like iPad or iPhone, although meraki mdm knows about this device type in the dashboard (model field).
... View more
Labels:
- Labels:
-
iOS
Sep 2 2018
11:34 PM
sounds good... but then i need to have a mac for the profile manager to be installed, correct ?
... View more
Aug 29 2018
2:54 AM
so what i would expect is: I have some SCEP CA that hands out certificates to the mobile devices. So the device should be able to authenticate with this certificate against the NPS server (EAP-TLS ?) So what do i have to configure at the NPS side (i guess enable "Microsoft: Smartcard- or other certificate"). But what would i configure in Meraki MDM to push out this profile then ?
... View more
Aug 29 2018
1:52 AM
For the Apple Configurator profile i need to use a MAC computer, correct ? Or do i have the chance to create a mobileconfig on Windows... I'd expect to get it working on Meraki alone 😉
... View more
Aug 29 2018
1:51 AM
We're authenticating against RADIUS (NPS)
... View more
Aug 10 2018
4:34 PM
Same thing here. i was told it is a GUI bug and support is on the run to fix all affected networks ...
... View more
Jul 29 2018
2:30 PM
I have Meraki SM and lots of iOS devices (mostly registered via DEP) in my network. I have a WPA2-Enterprise wireless-network where i’d like to add the phones to. Due to the problem that credentials cannot be empty from iOS 9+ on) i can not push the wireless profiles. Hardcoding a username is not an option. Has anyone found a way to accomplish that ? Or how are others solving the problem with pushing wire less profiles ? (Sentry is also an option but somehow does not work until now... will have to dig deeper into it...)
... View more
Labels:
- Labels:
-
iOS
Jul 29 2018
2:12 PM
I upgraded all my networks to 10.30 and am completely happy with it... Everything running stable, no problems until now.
... View more
Jun 14 2018
6:52 AM
Somehow this upgrade behaviour is more than disappointing. What i do not get is how the error might happen... The switch downloads the FW thru the tunnel established to meraki cloud. The switch checkes if the downloaded firmware image is ok. The switch flshes the firmware. The switch reboots. Perhaps it's not that easy, but it could be... Fact is the customers should not have these problems. The dashboard is not usable to check which firmware is running, because it shows the firmware configures (and estimated by the database). So i'd like to queue the update and KNOW it works - hoping it works is not an option...
... View more
Jun 12 2018
7:24 AM
Just tried an upgrade from 10.23 to 10.26 last night and again ran into issues. Some switches were stuck in blinking white state. Downgrading did not solve this completely, too... Some seemed to run 10.23 and some 10.26. So it seems as if there still would be some issues with this upgrading process...
... View more
Jun 4 2018
2:56 AM
I’d also love to see a config export and import functionality. Of course the API can do this, but it would be great to have this as a HTTP up- / download feature in the dashboard. Ideally for each network and for the whole org.
... View more
May 15 2018
6:47 AM
as long as the catalyst does not transport ALL VLans you should create one. But i'm not the catalyst expert...
... View more
Look under routing & dhcp in the switch settings. Either set up a dhcp server in the VLAN or let the meraki switch do the job. This is for the clients. For the vlan to set up the up you have to look under The VLANs settings.
... View more
Mar 28 2018
12:59 PM
I thought something like that would be the case. You‘re right with the IPs, two are left - sorry my fault, with these two free IPs the situation is not that odd. I had another network-supplier in mind where this could be accomplished with the help of a loopback interface which is not supported until now on Meraki switches.
... View more
Perhaps it would help you to use switch -> configure -> access policies -> guest vlan. This VLAN is used as a guest or remediation VLAN if auth fails.
... View more
Mar 28 2018
10:26 AM
Hi ! I have the following setup: LAN-Network (VLAN10) -> MS250-Stack as a router -> MPLS-Network (VLAN5) The MPLS-transfer-networks have a /29-mask (for the MPLS-VLAN-IP, the gateway and 2 more devices for redundancy). The MS250 has a VLAN-IP for each network, but each MS250 also needs a Switch-IP to connect to the cloud. The default route points to the gateway of the /29-MPLS-subnet. Now it seems as if the switches need their switch-IPs in the MPLS-network to connect to the cloud. When they are assigned a LAN-VLAN-IP they can not connect to the dashboard. That is a bit odd, because in the /29-MPLS-subnet the IPs shall be reserved for redundancy-devices. Is there any possibility to configure the switches to connect to the dashboard without having their switch-IPs in the MPLS network ?
... View more
Mar 27 2018
8:15 AM
For syncing two NPS you can have a look here: https://deployhappiness.com/two-network-policy-server-tricks-subnets-and-syncing/
... View more
Mar 27 2018
2:04 AM
Are these switches directly connected to a router or firewall or is there some kind of tunnel in between ?
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 2846 | Nov 18 2021 3:47 AM |
© 2024 Cisco Systems, Inc.
