Meraki

jimmyt234

Sounds like it! I have some running IOS-XE 17.12.3 and they work with the config history.

jimmyt234

There is config history 😊 Configuration History - Cisco Meraki Documentation

jimmyt234

Not quite sure why you would give yourself this headache and instead just deploy it in routed mode from the start?

jimmyt234

Using Tags to Manage MR Access Points - Cisco Meraki Documentation We have used it in the past to change the VLAN tag an SSID uses. See above documentation.

jimmyt234

Congrats to the winners!

jimmyt234

Definitely do it this way otherwise you need to faff around and disable WAN 2 on the Spare, strip out WAN 2 credentials from the Primary, reboot, turn around and touch your toes, hop on one leg 3 times and then it will let you add in the VIP on WAN 1 again. 🤣

jimmyt234

I can see it now, thank you!

jimmyt234

I FOUND THE GNOME! Solved: rename camera - The Meraki Community

jimmyt234

I've got one step further, in that there is a second API call required to then bind the split DNS profile to a network: Create Organization Appliance Dns Split Profiles Assignments Bulk Create - Meraki Dashboard API v1 - Cisco Meraki Developer Hub Alas it still didn't work and support were unable to help due to: "As this feature is still in its early stages of development and we currently do not have any documentation surrounding the requirements for the feature we will need to await later releases of the feature from our development team." I will wait some more months and see what happens.

jimmyt234

Thank you @Caleb-Engle! 😀

jimmyt234

@Hannah-C wrote: Alert Config and Notifications Change: New article. Is this 'Configure alerts' button/feature available now? I do not see it when I am navigating to the Organization>Alerts page under our Org?

jimmyt234

Weird. Can they link to some documentation that describes this behaviour? Having ignoring the flow preference rule?

jimmyt234

Documentation states the following: "Clients will send DNS requests to the LAN interface of the MX, which will then proxy those requests to the DNS server(s) configured for its primary Internet uplink." So, unless you set WAN 2 as the primary uplink then clients using a flow preference to use WAN 2 will actually be using WAN 1 DNS. Alternatively, you can change DHCP settings and set your own preferred DNS servers to the clients (e.g. Google or Umbrella), rather than using the configured uplink ones.

jimmyt234

Nice, good find! Now we just need an in-built alert for when these system resources go over a certain threshold...

jimmyt234

Congrats everyone! 🎉

jimmyt234 · ‎Nov 28 2024

Thanks @sungod I found this early access group last night and was granted entry this morning. I have emailed the direct feedback address and will see where that gets me. 🙂

jimmyt234 · ‎Nov 28 2024

Yes - we have seen lots of MX75 devices plagued by 'panic reboots' which can have several underlying causes according to support. Get it RMA'd.

jimmyt234 · ‎Nov 28 2024

I have always found the packet capture a bit flakey, sometimes just not showing any packets at all and then you refresh/come back 5 minutes later and it works!

jimmyt234 · ‎Nov 28 2024

I am 😊

jimmyt234 · ‎Nov 27 2024

APIs for Local and Split DNS Service This feature allows administrators to determine which DNS requests are answered by which DNS servers. I have raised a Meraki support ticket, but wanted to reach out to the community anyway to see if anyone had used this API / new feature yet. The first issue I had is when trying to add multiple nameserver addresses, it threw an error saying: "More than one address is in addresses" import requests url = "https://api.meraki.com/api/v1/organizations/ORG_ID/appliance/dns/split/profiles" payload = '''{ "name": "8x8 DNS Profile", "hostnames": [ "*.8x8.com", "*.packet8.net" ], "nameservers": { "addresses": [ "8.28.0.9", "192.84.18.11" ] } }''' headers = { "Authorization": "Bearer API_TOKEN", "Content-Type": "application/json", "Accept": "application/json" } response = requests.request('POST', url, headers=headers, data = payload) print(response.text.encode('utf8')) When I added a profile with only one nameserver I was not convinced it was actually redirecting traffic to the specified nameserver, because a packet capture on the Internet port showed the DNS query going to the clients DNS server, which is set to Proxy to upstream DNS rather than the one added in the DNS profile via the API...

jimmyt234 · ‎Nov 26 2024

Can you post in a code block please, makes it easier to read. Also have you tried the Meraki Python library? Might be easier, if you are able to install and use it.

jimmyt234 · ‎Nov 25 2024

You need to raise a support ticket and ask them to set Forceauthn to False. Solved: AnyConnect SSO to Entra (Azure AD) - The Meraki Community

jimmyt234 · ‎Nov 20 2024

We have noticed something similar across a dozen or so MX67 devices - CPU will remain constantly > 80% even during low/no traffic periods (ie. overnight). Running a mixture of 18.211.2/3/4 Meraki support have said: "Following an investigation of backend logs, we have confirmed that the MXs are being affected by an unexpected behaviour which causes the device to run at 100% CPU usage when one of the LAN ports is converted to WAN2, IDP/IDS is enabled, and a WAN change is made. The behaviour was already raised to our development team who are actively investigating and looking to produce a fix as soon as possible. Unfortunately, there is no ETA for when the fix is going to become available, at this moment in time. The workaround to reduce the CPU usage is to either restart the MX or disable IDP/IPS for around 5 minutes and re-enable it." We are in the process of scheduling reboots for these devices to see if it fixes it.

jimmyt234 · ‎Nov 20 2024

Try turning off the mac randomisation feature on the Apple device and see if that allows your static IP to stay fixed.

jimmyt234 · ‎Nov 20 2024

Perfectly acceptable design as others have mentioned. One thing to bear in mind is the number of tunnels a particular MX model can handle, as if you're running full AutoVPN mesh over 2 WANs then you will be scaling to a lot of tunnels. MX Sizing Guide & Principles - Cisco Meraki Documentation

About jimmyt234

jimmyt234

Community Record

Badges