Meraki – VRPC.COM

MX-100 1:many NAT not working as expected

Posted on October 23, 2020 - October 23, 2020 by vrpc

1:many NAT on MX-100 not usable for zoom connector or barracuda spam firewall

I have discovered that the 1:many meraki NAT implementation will always send outgoing traffic on the primary public IP instead of the IP assigned to the 1:many NAT rule.

I have spend hours on trying to find out why I am not able to use these two NAT services:

zoom meeting connector which should be possible to configured using 1:many NAT unfortunately not on meraki MX-100 device:
https://support.zoom.us/hc/en-us/articles/204898919-Configure-Meeting-Connector-Controller-Port-Forwarding
The solution to this is not to use 1:many NAT rule and use 1:1 NAT unfortunately this will require two public IPs or more if you add other zoom on-premise services.
barracuda spam firewall and exchange server.
I decided to offload some traffic from the barracuda firewall for traffic which is not related to SPAM checking and use the build in 1:many NAT instead of 1:1 on the MX-100.
This resulted in outbound email be send using the primary IP instead of the assigned 1:many NAT
This will result in SPF verification to fail and outgoing email be rejected from outside servers.
Had to revert back to 1:1 NAT and deal with occasional overload on barracuda firewall due to web traffic.

cheers

meraki system manager Third Party System Preference Panes

Posted on September 13, 2019 - October 23, 2020 by vrpc

When restricting macOS system preferences using meraki system manager settings it is necessary to white list third party plugins.

Here is the location with the information needed:
Macintosh HD> Library> PreferencePane
You will find the list of plugins here.
Right click on the plugin and select “Show Package Contens”
Open Contents folder
Find info.plist file and open it in text editor
You are looking for a line which contains com.pluginname…
something like this: “com.logitech.Logi-Options-Launcher”
And that is what is meraki looking for to be entered in the Third Party System Preference Panes.

DEP re-enrollment without wipe

Posted on August 16, 2017 by vrpc

This could help if you need to add already configured apple cumputer (DEP purchased) to Meraki or JAMF MDM management.

sudo rm /var/db/.AppleSetupDone
sudo rm -rf /var/db/ConfigurationProfiles/
sudo rm /Library/Keychains/apsd.keychain

after running these commands restart your computer and the default apple setup assistant will start. (no lost of personal data)