topic Re: How to block Inter-Vlan Routing Cisco Meraki MX64 in Network Security

How to block Inter-Vlan Routing Cisco Meraki MX64

Hamidsattarrana — Sun, 15 Dec 2024 04:48:30 GMT

Hello,

I have following LAN networks.

LAN1 >>> Vlan1 >>> 192.168.128.0/24

LAN2 >>> Vlan10 >>> 10.10.10.0/24

LAN3 >>>Vlan200 >>> 192.168.200.0/24

I want to block LAN1 and LAN2 to access LAN3. I created rules under outbound rules but they are not working. Please check the screenshot below

I think I am doing something wrong. Because when I ping from Vlan1 and Vlan10 it still works.

Please let me know what I am missing.

Thanks in Advance

Re: How to block Inter-Vlan Routing Cisco Meraki MX64

Mark Elsen — Sun, 15 Dec 2024 07:28:14 GMT

- You could also post this in https://community.meraki.com/t5/Security-SD-WAN/bd-p/security

Re: How to block Inter-Vlan Routing Cisco Meraki MX64

Hamidsattarrana — Sun, 15 Dec 2024 07:37:10 GMT

Hello,

Thanks for you suggestion.

https://community.meraki.com/t5/Security-SD-WAN/How-to-block-Inter-Vlan-Routing-Cisco-Meraki-MX64/m-p/257371#M57255

Re: How to block Inter-Vlan Routing Cisco Meraki MX64

Philip D'Ath — Sun, 15 Dec 2024 18:14:09 GMT

I can't read you screenshots rules - buy you do need to create ordinary layer 3 firewall rules.
https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Using_Layer_3_Firewall_Rules

Note that layer 3 firewall rules don't apply to traffic originating from the MX itself (and I can see from your screenshot you have done a ping test from the MX).