Meraki

Brash · ‎Apr 28 2023

If you do not keep firmware up to date, you will begin to see warnings in the dashboard under 'firmware upgrades'. Additionally, depending on how old the version is you're running, Meraki will sometimes auto-schedule an upgrade to force you to a higher version. Dashboard administrators will be notified in advance of this via email.

GreenMan · ‎Apr 27 2023

If you need Support to do something for you, you need to raise a case with Meraki Support via the appropriate means. This Community page is not included within that. After all - even if Support monitored here, how do they know which is your Dashboard Organization? See options for contacting Support under Help (or ?) Get help in the Dashboard. This is still supported, to the limits enabled by Google functionality, as per this KB article: https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_WPA2-Enterprise_with_Google_Auth

KarstenI · ‎Apr 27 2023

For all actual models that can go beyond a Gig throughput, we also have 10G interfaces. But yes, I would also like to see LAG support on the MX for a better redundancy handling.

This2shallpass · ‎Apr 26 2023

Thank you @Brash @alemabrahao for your viewpoint Shutting down the VMs is the best option.

GreenMan · ‎Apr 25 2023

What email address are you using, if you try raising a case that way?

Brash · ‎Apr 25 2023

Prior to MX firmware version 17, Meraki used brightcloud for content filtering categorisation. Version 17 and above, Meraki now hses Cisco Talos Intelligence. You can find information about it here, including how to submit content category/match disputes https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering_Powered_By_Cisco_Talos

cmr · ‎Apr 24 2023

Is there more traffic between VLANs or more traffic to the internet? If the former, you are good to go, if the latter, you might want to route on the MXs although it will be slower in theory, it should work better.

TBHPTL · ‎Apr 24 2023

In this day and age of locally administered MACs you are going to drive yourself mad trying to block anything from the air. How are you granting access to the network? What is your Meraki hardware? MX and MRs, MRs only? etc... Your answer will determine what's available "canned" from the Meraki ecosystem for controlling access.

SahadSalmiT · ‎Apr 23 2023

nope, no upstream firewall. All are directly connected to ISP.

Brash · ‎Apr 23 2023

Licensing is DNA Advantage and is activated and we'll in date. I actually dug a bit further on this and it turns out that there's a few different issues occurring. On failover, the tunnel does actually establish within a minute or so, but it takes ~20 minutes for the status to true up in the dashboard. In the meantime, if another failover occurs, the tunnel then fails to come up and will sometimes crash the switch. I've got cases open with both Cisco TAC and Meraki so hoping we'll be able to get it sorted. Just interested to see if anyone else using the feature has seen similar.

AET-Tech · ‎Apr 21 2023

FYI, All computers behind MX can no longer install OfficeSetup.exe. I was told it was HTTP Content Caching issue. Will need to upgrade to MX 17.10.5

Brash · ‎Apr 20 2023

Assuming the windows and Linux servers are end hosts and not doing any sort of bridging or switching, you would want BPDU guard (to ensure we don't accept body's from the server). I would also set udld to alert only as it's less likely you'll see a loop on this interface from a unidirectional flow issue. If they're designed to act as software switches, you'd want to look at root guard and potentially udld enforcement.

py2o3434 · ‎Apr 18 2023

Thanks for the replies. Sounds like the best way forward is going with a service provider.

PhilipDAth · ‎Apr 18 2023

This was kinda tried many years ago with the Meraki MC family - and then terminated. https://meraki.cisco.com/lib/pdf/meraki_mc_solution_guide.pdf I think it is highly unlikely Meraki would re-enter this space.

PhilipDAth · ‎Apr 18 2023

If you are using AutoVPN I would not create a new org. Much pain ahead. Otherwise, I guess it could be an easy way to keep both licence levels running simultaneously. Not an option I would normally have put at the top of my list though. A single org should be easier to manage.

JonP · ‎Apr 18 2023

This did indeed clear about an hour after your post, so thanks for that! 🙂

Brash · ‎Apr 17 2023

Meraki devices use a number of different ports to reach the cloud. If you login to the dashboard and navigate to Help (top left) -> firewall info, you'll be taken to a page that shows the required IP's and ports for your Meraki devices to connect to.

Adrian4 · ‎Apr 17 2023

ah that's interesting, I didn't consider the AP's speed in terms of handling more clients...only in terms of the connection speed of an individual. the principle of getting clients on and off the AP as fast as possible to make way for the next person - does that mean then its better to not limit user bandwidth? At the moment I think we limit clients to about 30Mb (with burst mode enabled) thinking it would help ensure everyone gets a usable amount. But I suppose the idea is that all the potential bandwidth in the world is no help if the client that is currently communicating is going slow. Slow client = slow network i guess?

JacekJ · ‎Apr 17 2023

I wonder what you mean by HA. One disappointment was to learn that you can't do firmware upgrades on the switches without a downtime. Example: you have 2 core switches (MS425) stacked you have a bunch of access switches, all of them connected to both core switches, LACP set up and so on each core switch has an uplink to the firewall/router etc. You would expect that you can do a firmware upgrade where only one of the core switches would reboot at a time, thus leaving the whole network operational, but no, this is not supported - you can try to force that using staging, but this is not a supported scenario and the Meraki Support doesn't know how this will behave (I tested that and got mixed results). Obviously rebooting access switches and loosing the clients behind them for a while is expected. In classic cisco world the missing feature is called Rolling Stack Upgrade.

cmr · ‎Apr 14 2023

Well done everyone, I seem to be making a habit of coming 5th, which means you are all most excellent in my eyes!

PhilipDAth · ‎Apr 12 2023

Are you talking about the time it takes AutoVPN to failover, or the time to failover, in general, to be able to access the Internet?

alemabrahao · ‎Apr 12 2023

I think it'll help you. https://dailysysadmin.com/KB/Article/690/configure-802-1x-certificate-based-authentication-meraki-wireless-access-points-microsoft-nps-authentication/?amp=1

Roey1984 · ‎Apr 11 2023

Thank you @Brash Appreciate your response

Boyan1 · ‎Apr 8 2023

@Brash You're awesome, the best outcome is when one's worst fears don't materialize and tags looks super promising, Thank you, will flag as solved once I test this today

Brash · ‎Apr 7 2023

Not sure exactly what you're looking for from your question... Aside from public documentation, if you're a Cisco partner looking for battle cards and other sales material you can check Meraki partner portal or Cisco sales connect https://www.merakipartners.com/ https://salesconnect.cisco.com/

About Brash

Brash

Community Record

Badges