Poor Wifi Performance with Meraki and Zebra

Had Customer getting poor performance between Meraki AP and Zebra Scanner.   The new custom app would freeze and lockup.

I checked the Wifi installation and apart from some AP mounting issues the wireless was good.

Speed tests from the device to the WLAN PI  were showing 400 Mbps  and using Wifi Scanners there were very few retransmission's.

Next was a WIFI Capture using Air-check G2.  Make sure you capture the connection to the network (4 ways handshake)  so you decrypt the packets later in wireshark.

Analysis in wireshark showed a lot of TCP retransmission's  but why ?

Pings from the network to the wireless device were rock solid and were < 1ms   and this is where I should have realised  something was wrong.   It was too good for a wireless network., but I did not pick this up.

Meraki are great  you can do packet captures on the wireless and wired side of the AP.

A capture on the wireless side showed the same as the Air-check G2 capture   a lot of TCP re transmission and resets.

I do not know why but I did a capture on the WIRED side and I was glad I did.

This show another MAC using the same IP address  (A Printer !)

Was the issue as simple as a duplicate IP.  After checking the DHCP scope the printers static IP was exactly in the DHCP range !

Changing the printer to be a DHCP reservation  and rebooting the wireless device   the device got a new IP and all was working fine....

This was good new as the customer was going to get another scanner to test with and it would have worked perfectly and then might have wrongly assumed that the other scanner was faulty.

After talking to the IT support dept they had received calls with issues with the printer but they thought was resolved as the scanner was not used over the last 2 weeks (till I came in !)

Contributing to this was the LONG DHCP least time so the scanner kept getting the same IP address from DHCP.


So a wireless issue was a simple duplicate IP.  

I should have picked up at the PING stage,    I was pining the printer on the LAN not the wireless device. !!!

But did resolve AP install issues  and optimised the wireless for these devices.

Disable 365 Azure Directory Windows Hello

Microsoft 365 Azure Directory is  great way to manage corporate Machines

By default Windows HELLO is enabled


This if fine if there is ONLY 1 user on the PC and it is NOT shared


Do disable you need to go to IN TUNE console

https://portal.azure.com/#blade/Microsoft_Intune_Enrollment/EnrollmentMenu/windowsEnrollment

now here...

https://endpoint.microsoft.com/#blade/Microsoft_Intune_DeviceSettings/DevicesEnrollmentMenu/windowsEnrollment

then 

New Cisco AP Fails to Join Controller

Field Notice: FN - 70479 - Out-Of-The-Box AP Fails to Join Controller or Joins with Single Radio Due to Country Mismatch - Replace on Failure

https//www.cisco.com/c/en/us/support/docs/field-notices/704/fn70479.html



A newly installed Access Point (AP) fails to join its controller or it joins the controller, but is only able to bring up one radio due to a manufacturing mismatch between the AP's domain and the radio's domain.

On a Mobility Express (ME) AP, the 2.4GHz radio will come up in Day 0 mode; however, after you configure the correct country code, the internal AP might fail to rejoin or might bring up only one radio.


AP28xx
AP38xx
AP48xx
AP18xx


You can use this URL to check the serials

http://serialnumbervalidation.com/70479/cgi-bin/index.cgi




NOTE:  if using a BARCODE SCANNER  to read the serial numbers off the BOX  Cisco prepends a "S" to the Serial and the "S" needs to be removed.

Meraki WiFi Cameras

Meraki WiFi Cameras Gen 2

Are 1x1 Dual Band 802.11AC   2.4Ghz and 5Ghz Client.

Can have 3 SSID  Primary  and Secondary  and backup

(I connect the backup to Phone Hot Spot for config)

Small Patch Antenna  (in MV32)  has 2 antennas to pick from  (remember it is a client) hard for a camera of this quality with all metal chassis to make wireless work but they did.

Outdoor Cameras have the antennas hidden under plastic dome


Another handy power feature for Camera  or (other POE device)  You need this to power if  Wireless ONLY.  or other POE adapter.  this is good if there is existing 12V power from old camera.

Remember Meraki Cameras record ONBOARD  so the wireless will have little use unless viewing footage.

The Meraki Device

AUTO Voltage and AUTO Polarity Sensing

12Vdc 2.75A    24V AC 2.2A

POE 54V 23W  (not quite POE Plus but more than POE.)

MA-PWR-MC-LV    or  called the "Eyepatch" power supply

Active Directory, Azure Directory Sync

You Need

DirectorySyncClientCmd.exe

Force a SYNC to office 365 NOW  (if you don't want to wait for 30 min for the sync)

From Power Shell (Admin)

Import-Module "C:\Program Files\Microsoft Azure AD Sync\Bin\ADSync\ADSync.psd1"


Start-ADSyncSyncCycle -PolicyType Delta   (whats changed)

Or

start-ADSyncSyncCycle -PolicyType Initial    (total resync)

Enable ADSI Editior (if registry is corrupt and not showing in MMC)

regsvr32 /u adsiedit.dll     (remove)

regsvr32 adsiedit.dll     (add)

Making missing fields visible 

http://activedirectoryfaq.com/2014/10/ad-attribute-editor-missing-make-search-visible/

List Domain Information

Ldifde –f domaindump.ldf

Connecting Power Shell to office 365 account

Connect-Msolservice

Get-MsolUser -UserPrincipalName joe@fred.onmicrosoft.com | fl