Tom O Callahan OCS Technology Planning and Strategy

Transcription

1 2017 Meraki Network Template VLAN Design Templates: MX84/65,MS225,MR42 Examples of common network configurations Updated per the April 25 th All Archdiocesan conference call Note: Use the Meraki documentation for more configuration and usage details. This is a best practice guide for schools. Please contact me with revisions or updates. Tom O Callahan OCS Technology Planning and Strategy tom.ocallahan@seattlearch.org

2 Network Template Examples The examples include use of VLANs to separate/isolate user communities (teachers and students). VLANs requires VLAN/network routing capable routers/security appliances. VLANs is typically the least complex and most reliable way to provide granular per user community access policies. Section A Access Points Section B Switches (VLANs) Section C Security Appliance (VLANs and network routing) Section D Network-wide

3 Section A Access Points Summary: Enable automatic power reduction Optimize performance with 5G preference SSIDs Enable band steering let Meraki make the client decisions Use DFS channels to provide the max radio capacity Provide a higher preference for high bit rate school Wi-Fi computers (min: 11, 24 is better) Consider using Air Marshall to contain non-school access points leakage More that 5 SSID may degrade performance by 20% Clients roaming: Apple default is v mode

4 MR42 Access Point Summary

5 Access Points with multiple networks MR42 SSID VLAN Tagged 6/5/ Meraki Template

6 Wireless Radio Settings Power, 5GHz 40 v. 80 MHz and DFS

7 Wireless Access Control Dual Band and Bitrate

8 Access point Tool ARP Table to Confirm Layer 2 Clients

9 AP to Meraki Performance Test Rough estimate of connection speed

10 Dynamic AP Mesh Neighbors

11 Wireless Per AP SSID SSID availability policy

12 Section B Switches

13 Two Switch Network

14 Two Switch Network Topology: 15 Total Meraki Components 1 MX65, 2 MS220 switches, 12 access points

15 MS port w/fiber on port 24

16 Root Switch PoE Uplink 6/5/ Meraki Template

17 Assigning the STP root switch and Management VLAN

18 Switch to Switch Uplink Port Type Trunk and Native VLAN 499

19 Switch Port List with Uplink on Port 48, Voice VLAN 20 6/5/ Meraki Template

20 All VLANs Trunked 6/5/ Meraki Template

21 Switch Forwarding Table sort by VLAN # option 6/5/ Meraki Template

22 DHCP Server Detection Allow/Block

23 Section C Security Appliance Summary: Contact Meraki or a reseller for hardware sizing. Contact Meraki tech support when performance issues are suspected. Capable of exporting policies for reuse/sharing

24 MX Summary Page 6/5/ Meraki Template

25 MX84 Security Appliance

26 MX Firewall Policy Part 1 6/5/ Meraki Template

27 MX Firewall Policy Part 2 6/5/ Meraki Template

28 WAN Address Assignment Requires console port connection remote changes are not allowed

29 Routing, VLAN and Network Assignment and VLAN policy

30 DHCP Networks and Mgmt VLAN 6/5/ Meraki Template

31 DHCP Networks w Mgmt VLAN 499

32 MX Route and VLANs Part 1 6/5/ Meraki Template

33 LAN Port Assignment MX VLAN Part 2 6/5/ Meraki Template

34 MX URL Blocking http and https

35 Content Filter Log: 2 examples 6/5/ Meraki Template

36 MX Intrusion detection

37 MX Route Table w/client VPN

38 MX Client VPN

39 Meraki MX84 Route Table ge/nodes/routes 6/5/ Meraki Template

40 Section D Network-wide

41 General Custom Pie Chart

42 Interesting Traffic Monitoring Custom Pie Chart - NWEA

43 Summary Report

44 Group Policies

45 Detailed Group Policy: VLAN Tag

46 VLAN Tag use for group policy 6/5/ Meraki Template