Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Lagcat
Lagcat
Getting noticed
Member since Jun 12, 2018
Mar 7 2022
Community Record
22
Posts
23
Kudos
0
Solutions
Badges
Mar 7 2022
3:29 AM
N122 down also - its alert testing day
... View more
Mar 3 2020
4:42 AM
thanks all for the replies looks like we are going to move forwards thank you
... View more
Mar 3 2020
2:52 AM
Hello due to the fun of the current virus spreading out company is looking to purchase a large amount of Z3 devices to hang off the back of our MX250 with 2x1GB lines is there any limit I should configure apart from the 1GB vpn throughput? will I reach any limit of the site-site connections? we are looking to purchase anywhere between 100-800 devices - mainly going to be a small amount of application and voice traffic Cheers Jake
... View more
Sep 13 2019
3:07 AM
just to carry on this I have a nice restart script now so all I have to do is tag my AP's with 'nightly-reboot' and they start rebooting with a 40sec delay between each but my next question is in the event logs there is no confirmation or reboot acknowledgement not just for the script but if I do a manual reboot there also does not show in the logs which is a bit of a pain as a Helpdesk informed me they have been rebooting an AP constantly throughout the day but not telling me and there does not seem to be any logs to confirm this is there a way I could capture it as an event? Cheers
... View more
Sep 5 2019
4:00 PM
Hi Philip i am covering our entire network subbnet with meraki so authentication is covered at this point as you can see the Same subnet is taking authentication the same as the AP which is not
... View more
Sep 5 2019
3:58 PM
Hi Raj sorry I was not sure what is passed in all these things do you have any description of what the ISE bug could be as I am sure we are running accounting cheers
... View more
Sep 5 2019
3:25 AM
1 Kudo
are users reporting disconnects on these 3/4 minutes of loss? what is the online time between the offline (if that makes sense)? AP numbers 36 & 37 are they on the same switch as the rest? only because these are remaining online....
... View more
Sep 5 2019
3:14 AM
Hello Firmware: 25.13 Cisco ISE: 2.3.0.298 just testing the radius authentication from the dashboard to our Cisco ISE radius Total APs: 9 APs passed: 4 APs failed: 5 APs unreachable: 0 these are same subnet, same site, same everything each time I test I receive different results and sometime I receive an error RADIUS attributes used: Airespace-ACL-Name:HS-Laptop RADIUS attributes unused: User-Name: *domain\user* State:ReauthSession:0a2d000fKS4uutHjQp5FArmB2ZstcLZ63zRmIXdtubIA7tDgTB4 I managed to find a good site explaining this a long time ago but I am unable to find it now so looking for help with a solution of explanation our old Cisco ISE box (decommissioned) used to always be 100% but as I am not a Cisco ISE person I unable to to even work out the difference and cisco forums are a mess so hoping here someone can point me in the correct direction Working AP ISE output: Authentication Details Source Timestamp 2019-09-05 09:42:20.332 Received Timestamp 2019-09-05 09:42:20.333 Policy Server servername Event 5200 Authentication succeeded Username domain\user Endpoint Id 00:00:00:00:00:02 Calling Station Id 00-00-00-00-00-02 Authentication Identity Store HS_AD Authentication Method MSCHAPV2 Authentication Protocol PEAP (EAP-MSCHAPv2) Network Device Meraki_AP Device Type All Device Types#Meraki_AP Location All Locations NAS IPv4 Address 10.45.99.12 NAS Port Type Wireless - IEEE 802.11 Authorization Profile HS_Laptop_Permit_All Response Time 19 milliseconds failing AP ISE output Authentication Details Source Timestamp 2019-09-05 09:42:21.899 Received Timestamp 2019-09-05 09:42:21.9 Policy Server servername Event 5400 Authentication failed Failure Reason 12953 Received EAP packet from the middle of conversation that contains a session on this PSN that does not exist Resolution Verify known NAD issues and published bugs. Verify NAD configuration. Turn debug log on DEBUG level to troubleshoot the problem. Root cause Session was not found on this PSN. Possible unexpected NAD behavior. Session belongs to this PSN according to hostname but may has already been reaped by timeout. This packet arrived too late. Username domain\user Endpoint Id 00:00:00:00:00:02 Calling Station Id 00-00-00-00-00-02 Network Device Meraki_AP Device Type All Device Types#Meraki_AP Location All Locations NAS IPv4 Address 10.45.99.13 NAS Port Type Wireless - IEEE 802.11 Response Time 4 milliseconds any help on this is greatly appreciated
... View more
thank you for the answer it makes sense that they are saying with the pair-wise but would this effect all devices at the same time? the wifi connected but no traffic is good as well as it would make sense when the wireless looked 100% but there is a potential traffic is not passing when it comes to devices I have 3 different devices (make and model) that were all effected with this event so the chipset part seems weird or do you mean the chipset in the Meraki AP? in this case the AP was an MR42 - but I guess all chipsets are pretty much the same across the Meraki product range?
... View more
Aug 29 2019
7:28 AM
I am doing lots of investigation into our warehouse right now and we have found each week this seems to be happening to the SSID is advertised on 2.4Ghz and 5Ghz as some devices are 2.4Ghz only as they are more legacy based all devices with the error look to be on 2.4Ghz - checking this by their connected channel (1,6,11) from what I read this can happen when the profile is incorrect - but these devices have not changed/SSID does not change - its warehouse production so no fingers allowed the issue is when this happens the clients are not roaming to the next AP they are trying to associate again but this I s not working yesterday I had to reboot the AP for authentication to come back today by the time I reached the area (3mins fast pace) it was associating again any ideas? - I can say move all devices to 5ghz but I don't know if this error relates to authentication how frequency of the device is playing a part
... View more
Aug 21 2019
1:46 PM
is it possible for you to share it with me or a cut down example when it comes to scripts and APIs its not something I do so its learning curve to get correct
... View more
Aug 20 2019
11:11 PM
@NolanHerring how are you rebooting on a schedule? if this just a manual operation or you have a automatic way of doing this? I was wondering if scheduling the ssid availability to go off for 30mins in early morning would have close the same effect it would not reboot the AP but it would clear all associations which is what I was wondering if I could get away with Cheers
... View more
Aug 20 2019
11:03 PM
thank you, makes sense when you say create the user - I was just doing a policy to says anything matching the Meraki_test without creating it on the ISE box first I will give this a go for the moment we now had TAC looking at out ISE box because we have a bug with out logging causing the primary to crash so we are down to the secondary ISE box only should of just stuck with windows radius would of been a world of ease - but security teams have their crazy ideas of buying boxes for $$$$ and then dumping them off just so they can say they have the product (rant moment)
... View more
Hi Nolan thank you for the reply I am heading to the warehouse next week to survey again and again to validate how the power/performance have changed I use Netscout survey Pro and we have Zebra devices which has some SSIDer type app giving RSSI details I had spent weeks on the deployment previously getting the roaming to a reasonable level I I worked out my 10-15% with multiple surveys for single APs showing the SSID and in most cases tape/chalk on the floors mapping out dbm and roaming variables for the devices the warehouse has moving stock and liquids/foil in most places including a 3 level warehouse floor so I had to get my bleed levels as accurate as possible if I receive a call regarding wireless they can tell me the floor/isle and I know what AP they should be on/joining/leaving as I know the boundaries I have in place to keep signal and roaming conditions what I was seeing after the upgrade were devices far passed the boundaries configured for roaming still attached to the same AP also at the time of roam they were now hopping between multiple APs within 30-50secs of joining I had our remote technical guy take a walk to different areas with a Zebra device and the signal was -3 to -5 better than before which in most cases would be a good things but the size of this warehouse and floors separated by metal grate - this adds lots of interference with the power increase this is bringing the possibility of overlapping channels closer today in places of high density so this is potentially now the issue the constant roaming was effecting the performance of the devices to make them unusable - after the downgrade it has been perfect again at first I though I had forgot to disable client balancing but it was already disabled I think I am going to be spending a long time troubleshooting this again - I don't mind it as its fun work mapping It all out I just was not expecting the impact when it comes to auto power and auto channel this went badly for us practicing back on install in this warehouse - it was like a wave of change every 20-30mins with the amount of reflection/scattering and the thin floors the APs really were not handling it well we have other warehouses/offices running on auto no problems so I am have nothing against letting the software do its job - but everywhere always ends up with a problem site Cheers
... View more
Hello thank you for the reply - at the moment I have static power, static channels and dfs disabled client roam balancing disabled I have between 10-15% overlap for roaming and -67dbm as my target signal strength all this seems fine at 23.11 devices are 5ghz using unii-1 I believe so I get 4 usable 5ghz channels and device are set to only scan on these usable channels to keep interference/chat to a minimum and really on 23.11 it is solid problem is the amount of features I am missing like wireless health, security requirements, firmware fixes - especially with security teams checking versions numbers this sort of thing is highlighted quickly when I upgrade to 25.13 my roaming overlap seems to change to easily 30% and no change has been made to power of channels which is having an affect to the devices so means I need to survey again multiple times to get this correct. No firmware updates between this mention a increase of this magnitude but every release has that generic general performance upgrade remark so it just if there is somewhere that shows In more detail The release note for general performance increases really I want to upgrade and keep on schedule which updates but the fear is everything will move to 26.x and it will all be thrown off again this warehouse is more than a few hours flight and planning for 24/7 production to play with a required service is not easiest conversation Cheers
... View more
Aug 17 2019
5:58 PM
Hello yep I am the full subnet ranges allowed but I always have conditions for host/ or domain username and something like #meraki as the vendor i would be happy just being able to change the drop to a reject - atleast this way the AP would get a reposnse i need to look more Monday into this - our ISE box is built through trial and error rather than full knowledge so little things like this end up turning into larger tasks just trying to find the correct policy setting cheers
... View more
Hi All i have a site locked down on 23.11 firmware a few weeks ago we tried upgrading to latest stable (25.13) 3 weeks after the upgrade we had to revert due to outages each week - the issue looks like the strength of the APs now completely overlap and now out roaming is completely off because this is a warehouse environment we have the signal tuned for the devices to influence the roaming over mez floors and racks moving back to 23.11 seems to have resolved the issues but i really want to get to a stable version at the bottom of every firmware there is the general bullet point: General performance, security and stability improvements. i am really interested in what these changes are in the firmware as something is making a fundamental change to the signal strength as i can see it in neighbouring APs as all strength is changing the warehouse and office are using MR42s, MR74s and it seems to change on all of them i am going to visit next week to survey the site after the firmware but from what i can see with the issues and the way the roaming has changed we are talking Meters of difference on the overlap i know 23.11 is really old but the issues were were having with disconnects every few minutes were killing us at the time - and every time we tried to upgrade to 24.x we went back to the same issue we have other warehouse and office on 25.13 not but nothing with setup like this for transmit power i know the best after is survey survey survey - which i will be doing next week but upgrading has a huge effect on our configuration i always made sure the client balancing was disabled sorry for going on and making little sense but i dont like the general fixes statement with no notes Cheers
... View more
Aug 17 2019
11:10 AM
Hi All looking through out ISE box last night (never really use it) i started to see all the failures for 'meraki_8021x_test' coming through and ISE dropping the requests rather than accepting/rejecting the request from what i understand because these are being dropped the APs constantly requesting every hour for these correct reply and will jump between out primary and backup ISE for requests until so does anyone have a policy with this working in ISE? i am not a great user - i have tried to add an OR section but it seemed to have no effect so at the moment i have 500+ APs sending these test requests hourly and throwing off the errors in the logs Info i found here also it says when it fails there would be a log shown in meraki events but this does not appear.....but i am definalty seeing APs constantly request from ISE multiple time with that username any help or suggestions would be great Cheers
... View more
Dec 4 2018
3:25 PM
21 Kudos
SD-WAN think of it like race from A-to-B but add multiple races at the same time: A-B, C-A, B-D, D-A, C-D there are multiple paths you could take motorways (MPLS), country lanes (Internet) or you could even fly (LTE). using SD-WAN is always letting you know the best way to go at all times sometimes the motorway is busy or an accident slows down traffic so you may be better off on the country lane maybe there is no other choice but to fly as its the faster/only option SD-WAN manages and monitors all available routes and provides traffic with the best path to take SD-WAN also provides options: maybe you want to split your traffic sending all your traffic send your important traffic down the motorways and your bulk traffic down the country lanes so that you know the motorway is always running at its top speed if some of the bulk traffic slows down on the country lanes its not so bad as you critical traffic is running fine on the motorway SD-WAN provides options to use multiple WAN technologies to provide additional bandwidth and resilience with cost savings to go with it attached is a terrible caveman pictures
... View more
Oct 17 2018
4:32 AM
Hello, I have sites with MR26 with exact same problem try asking meraki to revert your firmware to 23.11 and see if t becomes stable if it does please reply and let me know as we are in discussions about this problem now ~Cheers
... View more
My Top Kudoed Posts
© 2024 Cisco Systems, Inc.
