topic Re: LAN isolation in Wireless

LAN isolation

Vl@d@Ni — Wed, 28 Aug 2019 13:03:50 GMT

Hi all,

I am new with Meraki and I have some doubts how to configure two SSIDs in the office. I have one SSID CORP in Bridge mode using DHCP server and I have Guest SSID in NAT mode.

I want Guest to not be able to reach Corp network but because NAT mode doesnt support VLAN tagging I am not sure how to do the isolation.

AP is trunked to the LAN switch.

Any suggestions are welcome?

BR
V

Re: LAN isolation

BrechtSchamp — Wed, 28 Aug 2019 13:21:15 GMT

You can block their access to the wired network via the Wireless > Firewall & Traffic Shaping:

Re: LAN isolation

MarcP829 — Wed, 28 Aug 2019 13:22:59 GMT

NAT mode: Use Meraki DHCP

Clients receive IP addresses in an isolated 10.0.0.0/8 network. Clients cannot communicate with each other, but they may communicate with devices on the wired LAN if the SSID firewall settings permit.

Choose the SSID in the Firewall settings and do the following:

Block IPs and ports

Layer 2 LAN isolation

Disabled Enabled (bridge mode only)

Layer 3 firewall rules

# Policy Protocol Destination Port Comment Actions

Deny

Any

Local LAN

Any

Wireless clients accessing LAN

Argh, Brecht was faster, haha