topic Re: External Website(s) Blocked - How? in Wireless

External Website(s) Blocked - How?

jjeffery — Fri, 31 Mar 2023 09:31:06 GMT

Hello

I'm deploying MR36 units in our office.

We have a Ruckus-based WiFi in production. Traffic over our guest WiFi is allowed (via our Firewall).

I've added a guest WiFi with our Meraki units (which again has to route out via our Firewall) but I'm finding some traffic is blocked (traffic that is allowed via the Ruckus).

Where do I need to look to work out why this is happening? Presumably the traffic is being passed out so is there a Meraki Firewall service doing the blocking?

Re: External Website(s) Blocked - How?

Brash — Fri, 31 Mar 2023 09:49:24 GMT

Meraki AP's can implement firewall rules on SSID's.

Look under wireless -> firewall and traffic shaping in the dashboard

Re: External Website(s) Blocked - How?

jjeffery — Fri, 31 Mar 2023 10:20:54 GMT

Thanks, yes, I've seen that but I don't recall changing the Firewall settings from the defaults.

To double-check I created a new temp SSID and compared. The only thing that's different in the first SSID is that Local LAN is set to Deny (which is what we want)

Re: External Website(s) Blocked - How?

aleabrahao — Fri, 31 Mar 2023 11:43:28 GMT

if it's allowed on the ssid, this is probably not a Meraki issue. Is the Client IP assignment set to Bridged or NAT?

If you are using NAT, the IP of the AP is used to make the accesses, so it may be that you have some blockage in the APs network.

Re: External Website(s) Blocked - How?

jjeffery — Fri, 31 Mar 2023 11:50:41 GMT

In order to segregate guest devices from our office network I set it to "Meraki AP assigned (NAT mode)".

Re: External Website(s) Blocked - How?

aleabrahao — Fri, 31 Mar 2023 12:24:53 GMT

So, try to find some log on your firewall coming from the AP IP.