Meraki

Rayw · ‎Feb 20 2024

I currently am only doing 802.1X(AD) on the SSID. My users have figured out they can get their personal iPhone on the SSID by entering their AD credentials. I would like to do 802.1X(AD) + MAC Filtering via ISE. This way the device would have to be in the MAC allowed group plus their AD credentials. Does anyone how I can accomplish this?

Rayw · ‎Jan 4 2024

Is there no model C9300-M that has 24 or 48 ports of SFP interface? Similar to MS425 but supports adaptive policy. As I understand it that MS425 does NOT support adaptive policy. Thank you

Rayw · ‎Jan 4 2024

Could anyone tell me the interface type (RJ45, SFP+) for switch model C9300-48UXMM. All the datasheet says is C9300-48UXMM 36 x 100M/1G/2.5G + 12 x 100M/1G/2.5G/5G/10G. It does not say the Interface type. Thank you

Rayw · ‎Oct 20 2023

Yes, I have ready that in documentation but doesn't answer my question. Can a MS425-16 in layer 2 forward a CMD header? Yes or No? Thanks

Rayw · ‎Oct 20 2023

Will a MS425-16 support CMD encapsulation. Will a MS425-16 preserve and propagate the CMD header if the MS425-16 is used only as a layer 2 switch for aggregate level. No client endpoints will terminate on the MS425-16. This is for Adaptive Policy and SGT tags.

Rayw · ‎Jul 14 2023

We have a new CISO. he has created a new firewall policy that states all Internet connections first have to have a boundary router with ingress and egress filtering to protect against IP address spoofing and directed IP broadcasts. Then a firewall that does IDS, ACLs and all the firewall protection. Is this truly a best practice. Does have one have a router then a firewall?

Rayw · ‎Jul 14 2023

Do any of you have a policy requirement that a boundary router will function as the network perimeter interface and accept traffic from the Internet Service Provider before the firewall? All boundary routers will also implement ingress and egress filtering to protect against IP address spoofing and directed IP broadcasts?

Rayw · ‎May 10 2022

I have a SCADA network that I have firewalled segmented off from the business network with a Meraki MX84. The business network is a large routed MAN over fiber. All private IP addressing. I now need to have a computer across the MAN access the SCADA network. Could I turn on VPN client on the MX84 and have the computer do a VPN over the inside MAN private IPs to the MX84 in order to create a secure tunnel?

Rayw · ‎Mar 10 2022

I made a simple port change on a MS switch and its been 45 minutes out of date. Anyone else not able to update MS config?

Rayw · ‎Dec 10 2021

I am blocking the country France and there is a website staff needs to access. How can I whitelist jsut a domain within France? Or do I have to take France off the deny list?

Rayw · ‎Nov 18 2021

I have an MX100 and am changing ISP so I will have a new set of public IPs. Is there a way I can configure all these changes to NAT rules and WAN interface a head of time to and then apply the changes to make the cut over faster rather than at time of cutover doing all the config changes then?

Rayw · ‎Oct 25 2021

Does anyone know can you run an OTDR fiber test with a Meraki switch still plugged in and running at the far end?

Rayw · ‎Mar 15 2021

I got kicked out of the dashboard and then couldnt get logged back in. Now I am getting a ton of email alerts about my VPN tunnels being down.

Meraki

Community

About Rayw

Rayw

Community Record

Badges

802.1X(AD) + MAC Filtering via ISE

Re: Interface type on model C9300-48UXMM

Interface type on model C9300-48UXMM

Re: MS425-16 support CMD encapsulation

MS425-16 support CMD encapsulation

Re: Internet boundary router before firewall policy requirement

Internet boundary router before firewall policy requirement

MX84 proving internal network segmentation

MS config out of date

blocking by Country

MX100 changing ISP

OTDR fiber test

Re: Dashboard Issues?

Re: Dashboard Issues?