Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About PhillipJFry
PhillipJFry
Here to help
Member since Apr 25, 2022
Mar 1 2024
Community Record
19
Posts
4
Kudos
2
Solutions
Badges
Feb 8 2024
1:50 PM
Im also still waiting for this feature to show up in our dashboard. I was told by an engineer they have been slowly pushing out this update since Oct. of 2023.
... View more
May 30 2023
7:53 AM
Wanted to inform everyone that we finally got the issue resolved. The issue was because both mab devices, one being the phone, and the other being a pc, were both utilizing the same network access policy on the NPS server. The network policy was passing the AV-Pair attribute for voice to both devices, causing a conflict. Once I create a separate network policy for each device, the pc and phone both are authenticating like they should.
... View more
May 25 2023
7:36 AM
Your logs and setup look very similar to ours. So far it seem like the issue is because both devices are MAB auth. devices. They are are hitting the same network policy on the radius server. I still have an open ticket with TAC on this, hopefully we have some answers soon.
... View more
May 25 2023
7:33 AM
See the below image for port configuration. I still have an open ticket with TAC on this. Making some progress, but no solution yet.
... View more
May 11 2023
10:18 AM
I can get the single phone client to work if I use single host mode, but we are trying to do the "multi-domain" mode since we have PCs hind the phone.
... View more
May 11 2023
8:32 AM
We are trying to setup an 8021x MAB policy for our phones. The phones are avaya phones. The windows RADIUS server's network policy constraints are configured for ethernet and must be a member of a security group. Also, I have set vendor specific Cisco AV Pair device-traffic-class=voice attribute in the policy. We have created an AD user account with the MAC as the username/password. Logs show MAB auth response is accept, but the shows eap failure Identity anonymous. Then the phone gets put on the failed auth guest vlan we setup, but cant ping the device. Any recommendations or advice for me to look at?
... View more
Labels:
- Labels:
-
Interfaces
-
Other
Mar 8 2023
11:34 AM
Bringing this back alive. Does anyone see a problem with this ACL? With these ACLs in place, mobile clients do not get a DHCP IP. If I remove the ACLs, everything works as it should. Also this network has the "Deny local LAN" option ticked under ssid.
... View more
Feb 14 2023
10:11 AM
I need the ACLs in place for the Guest devices that are going to be plugged into the switch.
... View more
Feb 14 2023
10:06 AM
Thank you everyone for the quick responses. I just wanted to make sure I wasnt hindering any wireless clients from getting connected/dhcp addresses.
... View more
Feb 14 2023
10:04 AM
So order of operations would process the ACLs first then it would process "deny local LAN"?
... View more
Feb 14 2023
9:51 AM
We have an SSID setup for guest devices, VLAN20, with the deny local LAN option enabled. We also have a few ACLs configured for VLAN 20 (see screen shot). Would there be any conflict having the ACLs and "deny local LAN"?
... View more
Nov 16 2022
2:54 PM
I thought this was the case. I guess the long running list will have to do until we can try the other alternatives. Thank you for the reply
... View more
Nov 16 2022
7:04 AM
Hello everyone, I am still new to Meraki and getting used to how Meraki does things. I am working on creating multiple ACLs for our networks. An ACL for VLAN 2, ACL for VLAN 3, etc. The ACLs basically only giving those networks dns,dhcp, access to specific hosts, and block from communicating with the rest of our network. I am used to the traditional Cisco way, you build out your ACL, and apply that to the network. I am not seeing that option in our Meraki environment. I can create the ACLs line by line, like one giant list, and specify the vlan on that line. It just seems kind of ugly for lack of better words. Is there another way to achieve this that I am missing? If it helps, our environment is a mixture of ms350s and ms250s.
... View more
Labels:
- Labels:
-
ACLs
May 2 2022
11:15 AM
2 Kudos
Yeah we are back on 28.6.1. Its been solid since configuring our firewall for the 443 traffic.
... View more
May 2 2022
6:44 AM
🙂 This time is was not Flexo.
... View more
May 2 2022
6:43 AM
We stayed on 27.7.1 for the longest time due to similar issues. With 28.6.1 and forward, just make sure you have 443 traffic to Meraki's IP block 209.206.48.0/20 and you should be good.
... View more
Apr 29 2022
12:22 PM
2 Kudos
Wanted to give an update. After talking with support, some of our APs were having fw reboot issues. It was all due to we were doing ssl decrypt on our upstream firewalls. Once we put in the meraki IP block to not decrypt, all of our issues cleared up.
... View more
Apr 26 2022
11:52 AM
Was it disconnecting before 28.6.1 Not 100% sure on this one... Have you looked in the event log I dont see anything in the event logs of the AP. On the Meraki SW, I do see port status/port STP change logs repetitively. Are you MX, MX, MR ; all Meraki gear All of our APs are MR series. Switches range from ms210 ms250 or ms350s IP / management vlan conflict maybe ? IPs are all statically set no IP conflicts. Do clients feel the disconnect I dont think so. I have not heard any complaints at least.
... View more
Apr 26 2022
9:31 AM
Hello all. I am very new to Meraki and still learning my way around. We have sever sites running different MR series access points and a lot of them are showing a disconnect that lasts about 3 minutes. It almost looks like it is on a schedule. I am not exactly sure what to start looking at. We just recently did the 28.6.1 update, and this is when I noticed the disconnects. Not sure if it was happening before or not. I have ran the built in "cable test" on our meraki switches, and the cable test comes back just fine. Any other ideas I could look at? I have provided some screen shots below. Thanks in advance! MR76
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 1072 | May 30 2023 7:53 AM | |
| 2197 | Apr 29 2022 12:22 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 2076 | |
| 2 | 2197 |
© 2024 Cisco Systems, Inc.
