Where is the best place to sell used Meraki gear. I have some things I just took out of one of my other businesses Mx-68 and 4 AP’s to I have some gear a client paid for and never took delivery on. What’s the best way to sell or what site should I use.
Thank you
Hi everyone,
I wanted to share a network troubleshooting case I've been diagnosing for one of our company's clients. My official role is "Sysadmin," but I wear many hats. I've been in this position for almost 3 years, and it's my first "serious" IT job. Trying to be proactive during downtime when tickets are low, I started analyzing this client's network and I noticed a massive amount of [TCP Dup ACK] and [TCP Retransmission] packets. Many of these were directly tied to an SQL server. In the past, users had reported intermittent connection drops to this server, but we were never able to reproduce the issue on our end. This prompted me to dig deeper into the network to figure out how it’s actually operating.
The infrastructure consists of 1 router, 13 switches, and 75 APs—all Cisco Meraki. I began auditing the switches and their event logs one by one. I had never touched Meraki before, so I went in blind, relying heavily on documentation and AI assistance. This is what I've uncovered so far:
stp_bpdu_conflict events. It doesn't happen as frequently as the MAC flapping, but it is a recurring issue.This led me to investigate what lies on the other side of that wireless bridge, especially since the exact log reads:
>
From what I understand, the switch received an STP BPDU from MAC 0C:EA:14... when it was strictly expecting it from MAC 00:0B:86....
Behind the local Data Center switch, there is a legitimate Root Switch with a priority of 4096 handling STP. On the other side of the wireless bridge, I found a UniFi switch matching the 0C MAC address, and an Aruba Mobility Controller matching the 00:0B MAC address.
According to Cisco Meraki's best practices for multi-vendor environments, it is recommended to enable Root Guard on any port leading to non-Meraki switches. I went ahead and enabled Root Guard on Port 24, but the issues persist.
What should I look into next? The last thing I checked was the STP priorities: both the UniFi switch and the Aruba controller are running the default maximum priority of 32768 (Note: corrected from 36768).
[TCP Dup ACK] and [TCP Retransmission] packets related to this STP BPDU conflict?>
What would be the best next steps to continue troubleshooting or analyzing this environment?
Thanks in advance for your insights!Hi everyone,I wanted to share a network troubleshooting case I've been diagnosing for one of our company's clients. My official role is "Sysadmin," but I wear many hats. I've been in this position for almost 3 years, and it's my first "serious" IT job. Trying to be proactive during downtime when tickets are low, I started analyzing this client's network and found the following:[Insert TCP Dup ACK screenshot here]I noticed a massive amount of [TCP Dup ACK] and [TCP Retransmission] packets. Many of these were directly tied to an SQL server. In the past, users had reported intermittent connection drops to this server, but we were never able to reproduce the issue on our end. This prompted me to dig deeper into the network to figure out how it’s actually operating.The infrastructure consists of 1 router, 13 switches, and 75 APs—all Cisco Meraki. I began auditing the switches and their event logs one by one. I had never touched Meraki before, so I went in blind, relying heavily on documentation and AI assistance. This is what I've uncovered so far:Every single switch is suffering from severe MAC Address Flapping.
Some switches have degraded ports operating at sub-optimal speeds (link speed duplex mismatches/downgrades).
On one specific switch, Port 24 is connected to a Ubiquiti wireless bridge (antenna) that links to a remote sector of the campus. Along with the MAC flapping, this specific port triggers stp_bpdu_conflict events. It doesn't happen as frequently as the MAC flapping, but it is a recurring issue.This led me to investigate what lies on the other side of that wireless bridge, especially since the exact log reads:
Port 24 received BPDU from 0C:EA:14:x, 24; expected 00:0B:86:x, 1
From what I understand, the switch received an STP BPDU from MAC 0C:EA:14... when it was strictly expecting it from MAC 00:0B:86....Behind the local Data Center switch, there is a legitimate Root Switch with a priority of 4096 handling STP. On the other side of the wireless bridge, I found a UniFi switch matching the 0C MAC address, and an Aruba Mobility Controller matching the 00:0B MAC address.According to Cisco Meraki's best practices for multi-vendor environments, it is recommended to enable Root Guard on any port leading to non-Meraki switches. I went ahead and enabled Root Guard on Port 24, but the issues persist.What should I look into next? The last thing I checked was the STP priorities: both the UniFi switch and the Aruba controller are running the default maximum priority of 32768 (Note: corrected from 36768).Are the [TCP Dup ACK] and [TCP Retransmission] packets related to this STP BPDU conflict?
Is the MAC address flapping also tied to this, or is it a separate issue? Every flapping MAC I’ve tracked down so far belongs to a smartphone. However, some MAC addresses log over 700 flaps in just 4 days. Here is a sample MACs flapping:
MAC: 0E:6D:X, Ports: 15, AGGR/0, 16, VLAN: 27
MAC: 2E:3C:X, Ports: AGGR/0, 15, 16, VLAN: 27
MAC: CA:78:X, Ports: 15, AGGR/0, 15, VLAN: 27
MAC: 3C:CD:X, Ports: AGGR/0, 15, AGGR/0, VLAN: 26
MAC: E0:2B:X, Ports: 15, AGGR/0, 15, VLAN: 27
MAC: BE:85:X, Ports: 16, 15, 16, VLAN: 27
MAC: 42:AA:X, Ports: 15, AGGR/0, 16, VLAN: 27
What would be the best next steps to continue troubleshooting or analyzing this environment?Thanks in advance for your insights!
How to troubleshoot this issue if failover doesn’t work properly in Cisco Meraki MX.
We are leasing a new warehouse for our company. The previous company left all their Meraki switches and WAPs. The property manager said since they left it, we can have it.
I used Meraki in the past, but it has been over 5 years since I used Meraki.
I created a new Meraki account, and I was able to claim all the switches, firewall, and two spare APs that were in the network closet.
I am assuming since I was able to claim the equipment onto our account that the equipment is no longer registered to the pervious company's account.
Is it as simple as get licenses for the hardware and I am set, or am I missing something else?
I know I still need to check the other WAPs, but I need to pull them down to get the serial numbers of the WAPs.
EDIT: Forgot to add, I have 1.5Gbps internet
I want to share my experience in hopes that I save you from the same fate….
Last year, when the MX75s were having the reboot issue: We had a few upset clients so we did a buy back and upgraded them due to the firmware issues. Kept a few for the office. Had an extra, so I upgraded my MX67 for home to the MX75.
Sweet. Should be able to hit 1Gbps now! Set it up. No speed change… Steam was maxing out at ~70MBps. Whatever, I had a lot on my plate, it’s working. Move on to the next thing.
Canada Day here so a nice and chill Wednesday, let’s play some games. Updating my games this morning. ~70MBps max. This should be way more… Fine, let’s look… took me 3 minutes to figure out the issue after dealing with it since the fall.
SD-WAN traffic was bottlenecked to 600mbps… For those in the future, make sure you double check these settings when upgrading your firewalls…
TL;DR I cannot brain. I haz the dumb.
Hey guys, not sure if this is allowed or not so delete if you want, but figured this was more relevant to r/meraki over r/homelabsales.
I have a 9178l and 5 year MR-ADV license for sale, both unclaimed. The AP has been opened but not used at all. Looking to get $2500 plus shipping. PayPal G+S only.
Hello,
I'm more from the Cisco side of config / licensing and have a few questions I hope the community can help with.
Placed an order for Meraki hardware and licensing. This is the first Meraki HW so there is no existing dashboard.
Do I setup the dashboard first just by creating an account or would you normally get an email for "licenses" and to then follow the registration instructions? Is the Dashboard linked in anyway to the Cisco licensing portal/account?
I also ordered some cisco catalyst devices with advantage licenses which we now have in our CCO licensing portal. The plan was to bring these into these catalyst devices into the Meraki Dashboard for cloud management.
Do I license these catalyst devices in the normal cisco smart way and then bring them into the Dashboard (once created) for configuration?
Really just trying to understand how the cisco licensing portal and Meraki dashboard hang together if at all.
Thanks!
I don't get patch management on Meraki...
Why version 19.2.8 is marked as recommended against current 26.1.4 version, what the point of a Release Candidate for a minor version ?
I’ve seen today in the release notes for the newest MX beta build (MX 26.2) https inspection has been introduced. I’m intrigued to know what performance impact this feature will have, as if I recall correctly the last time they attempted this the utilization shot through the roof.
Are we now starting to see software features being introduced with just the newer 8k series in mind?
I’d be keen to hear other people’s thoughts or if anyone is trialing beta firmware and running https inspection.
Link to relevant Meraki doc -https://documentation.meraki.com/SASE_and_SD-WAN/MX/Operate_and_Maintain/Content_Filtering_and_Threat_Protection/HTTPS_Inspection
I was reading through the 17.15.5 release notes and spotted this:
Switch Templates with bound networks cannot directly upgrade from CS firmware to IOS XE firmware. Cisco recommends unbinding the network, upgrading it, then rebinding it to an IOS XE template.
That seems fine if you've got a handful of sites, but we've got hundreds of template networks. Unbinding and rebinding every single one cannot surely be the recommended approach here?
Just wondering what everyone else has done.
Feels like this can't be the intended process for larger deployments, so I'm interested to hear how others have handled it.
If unbinding really is the only way - what are the impacts here? Are any settings or configuration lost/defaulted during the unbinding and re-binding process?
Hello community, im new to meraki and I wanted to clarify something. When setting a warm spare pair, if the upstream device is the dhcp server how can I configure the wan interface IP? when its manually I set a specific IP for each wan and then a virtual IP, but ho does this work when is dhcp?
Anyone else getting this? My orgs dashboard is just getting a static "DNS cache overflow" message. All systems "Operational" according to status.meraki.net..
Just want to preface with I’m waiting to hear back from our Cisco partner on an answer but in November last year we signed a 3-year EA agreement. The end of sale date has come and gone for ordering new Systems Manager licenses and yet we’re still able to add devices without issue even though we are currently over provisioned. Anyone else notice the same? Assuming it has something to do with our agreement but nobody was able to give us a concrete answer prior to the end of sale date in June.
