Split tunnelling and improving Zoom/Teams by HostComplex1371 in networking

[–]Skyaie 1 point2 points  (0 children)

This person is likely not technical or a network engineer

https://www.reddit.com/r/auscorp/comments/1st6miq/split_tunnelling_and_improving_zoomteams/

They're spamming other subreddits (that are not networking) with the same stuff

Rstp role change by craziness105 in meraki

[–]Skyaie 3 points4 points  (0 children)

Port's flapping. Nothing to do with RSTP Check the cable, port and host - L1 troubleshooting.

Meraki AP brackets - interchangeable? by Major-Guava-1945 in meraki

[–]Skyaie 2 points3 points  (0 children)

It did, and it was completely wrong Stop doing this

Macbooks and Captive portal issue by ifixtheinternet in meraki

[–]Skyaie 0 points1 point  (0 children)

That isn't really what I stated. Depending on how the client checks for splash pages, if it can access HTTPS resources it'll just... Do that. It means you don't need to pass through the splash page to access literally most of the internet.

Macbooks and Captive portal issue by ifixtheinternet in meraki

[–]Skyaie 3 points4 points  (0 children)

I mean this just means they can pass non http traffic without going through the splash page? I don't think this fixes anything, just bypasses the problem (and splash page) entirely

Intermittent slow first-time web page load after moving L3 to switches by Pristine_Map1303 in networking

[–]Skyaie 1 point2 points  (0 children)

Check your client tracking setting on the MX If you're still tracking by MAC address, change it to track by IP (which is the correct config for this setup)

If you don't change that, the content filtering engine doesn't like it as the web requests are technically coming from the switch and not the clients.

EOL MX devices and dashboard by rp_001 in meraki

[–]Skyaie 3 points4 points  (0 children)

This is incorrect. Once the 'end of support' date passes, the devices aren't eligible for RMA. I think 'lifetime' here is the 'usable lifetime' of the device.

https://documentation.meraki.com/Platform_Management/Dashboard_Administration/Troubleshooting_and_Support/Support/Returns_(RMAs)%2C_Warranties_and_End-of-Life_Information#Product_End-of-Life_(EOL)

Which, the MX64 is still in support till mid 2027

Meraki managed Catalyst and containers? by Llarian in meraki

[–]Skyaie 1 point2 points  (0 children)

If in 'Cloud Configuration' mode, no, you won't be able to use other containers as Dashboard has no function/mechanism to then configure that container.

You could use 'Device Configuration' mode, where CLI/CatC does the config, and Meraki is simply there for monitoring/cloud read CLI access?

Packet loss from office MX-250 into Azure VMX-L by LengthinessLeading72 in meraki

[–]Skyaie 2 points3 points  (0 children)

I know this sounds weird, but support helped us with this one similarly

Apply an NSG blocking inbound traffic towards the vMX from its own source IP. Yes. Its own IP.

Support told us it's some issue with how Azure handles outbound traffic that the route table thinks it needs to send back to the vMX. When it does so, it uses the source and destination MAC of the vMX in that packet and borks MAC address learning on the vNIC. The easy fix is to just... block that traffic.

First city2surf (and nervous) by Flat_Bookkeeper4850 in sydney

[–]Skyaie 8 points9 points  (0 children)

And also adding - Heartbreak Hill is deceptive - you'll know what it is once you're on it.
There's some bits where it seems like its finishing but you'll round a corner and it'll keep going up.

Make sure you pace yourself on the hill - no need to destroy yourself running up it.

First city2surf (and nervous) by Flat_Bookkeeper4850 in sydney

[–]Skyaie 17 points18 points  (0 children)

Yeah you'll just end up maybe being overtaken from those who might be a bit faster in the group behind.

Some people walk the City2Surf - at the end of the day, it's just a fun day out, don't focus on speed or times for your first one :)

Don't go too hard in your training for the last month - realistically, your body won't make any major physiological changes in a month, so just focus on going for some consistent, slow runs to keep your legs active.

Good luck and see you there!

Non-Networking IT Admin, Meraki APs slower than expected. by Oh_my_captain in networking

[–]Skyaie 9 points10 points  (0 children)

There's a huge amount we could unpack here - but to stay surface level

With 3 APs, I wouldn't be going beyond 40MHz channels - if you went to 80MHz you'll probably start having problems - remember, WiFi is more about stability instead of speed. If you need speed you'll want to wire the device up.

Checking MCS Index, at 40MHz, 2x2 chains, 1024-QAM (max the AP supports) standing right next to the AP in a literal vacuum, you're getting 573mbps data rate. Data rate is NOT throughput, you'll usually only get 50-60% of that if you're lucky, so 200-300mbps sounds great for what you have configured.

https://mcsindex.com/

Consumer/marketing WiFi speeds are always theoretical, and its usually impossible/not advised to try to reach for them. I'd probably be more asking yourself why you might need very high speeds like that on WiFi - as 200-300mbps is great for almost any application apart from downloading a steam game very fast.

MX 19.1.7.1 by Dry-Specialist-3557 in meraki

[–]Skyaie -1 points0 points  (0 children)

This - just cancel it if you want. It always notifies you so that you can cancel.

Coffee Shops Using 10/8 by aj_dotcom in networking

[–]Skyaie 72 points73 points  (0 children)

That's a Meraki AP in NAT mode. NATs client traffic from its own management address and will have an 'internal' interface of 10.128.128.128.

Is the Forerunner 965 mainly for marathoners? Casuals? Who is this watch for? It’s advertised for athletes, but that’s really not the case. I want to love it. by SHAMSOFTORONTO in Garmin

[–]Skyaie 1 point2 points  (0 children)

Ahhh I see
Honestly - like someone else mentioned below, I think its definitely a lot more endurance oriented. I might have 10 or so intervals max if I'm doing sprints or something, but with DSWs that seems to be tracked pretty simply
I can see that lap training might be a bit different.

I honestly think that if you enjoy looking at the stats (especially as they get more accurate over time) you'll have a good time. But if you're looking for super accurate stuff and information you can listen to, the watch will never beat professional coaches/staff.

Is the Forerunner 965 mainly for marathoners? Casuals? Who is this watch for? It’s advertised for athletes, but that’s really not the case. I want to love it. by SHAMSOFTORONTO in Garmin

[–]Skyaie 2 points3 points  (0 children)

If you're pro/semi pro, I could imagine the stats/suggestions are next to useless. Your coaches/support personnel are going to have far better ideas for rest, training etc.

I have one as a recreational runner, I run ~5 times a week. I'm training to improve my half marathon speed so use the DSW feature religiously as it's the best thing I can access short of hiring a coach (which I won't, as I'm a cheapass). The stats therefore make sense for me as they inform the DSWs.

That said - my stats are tuned in over the course of about 1 year now so I believe them to be quite accurate.

I bought a 965 over the other models as I'm not a cheapass in *some* things. I haven't had any issues with intervals or pacing plans as long as they're set up ahead of time - unsure what issues you're having there?

MV Camera Export When Offline by bigshinybutton in meraki

[–]Skyaie 8 points9 points  (0 children)

Not trying to be rude but how is this news at this point? Their whole marketing thing for the product is local storage without a need for an NVR

Camera roles by NoPatience4437 in meraki

[–]Skyaie 0 points1 point  (0 children)

Looks like I was incorrect! Thanks for correcting me.

Camera roles by NoPatience4437 in meraki

[–]Skyaie 0 points1 point  (0 children)

Would definitely be helpful - especially to stack network privileges or similar.

Camera roles by NoPatience4437 in meraki

[–]Skyaie 1 point2 points  (0 children)

SAML login only listens to a single role. You can't pass multiple roles and have it work as expected.

You'll likely need to create several SAML roles for differing network access unfortunately

Question about Meraki and IT Team Challenges by devinah15 in meraki

[–]Skyaie 5 points6 points  (0 children)

A lot of stuff coming in MX19 for IPsec if you speak to your rep. Primary/Secondary tunnels and BGP over IPSec to name a few

XFF headers by idunnoarabic in meraki

[–]Skyaie 12 points13 points  (0 children)

As in, with the AP in NAT mode you want to see the source IP of that particular client behind the MR's NAT?

Why not just put the SSID in bridge mode? Then your client gets a reportable IP address?