cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3403
Views
6
Helpful
4
Replies

IP Version for updateNetworkWirelessSsidFirewallL3FirewallRules

frank.veprek
Level 3
Level 3

Hi there. New to this forum and VERY new to APIs and any sort of programming, so please forgive any wrong terminology I may use.

I'm trying to utilize "updateNetworkWirelessSsidFirewallL3FirewallRules" to insert rules that I've pulled from one of my networks into another. However, there doesn't seem to be a schema definition for IP Version. My rules are IPv4, but the rules default to IPv6 so 99% of my rules return an error that " ['At least one of your firewall rules is invalid: "ssid[firewall_rules][1][dst_cidr] For ACL rules applied to both IPv4 and IPv6, Destination address must be \'any\'", "ssid[firewall_rules][4][dst_cidr] For ACL rules applied to both IPv4 and IPv6, Destination address must be \'any\'", etc.., etc..

I can't seem to find anything in their documentation that tells me what the schema field is for IP Version. If anyone knows, I'd appreciate the assistance. Thanks!

1 Accepted Solution

Accepted Solutions

aleabrahao
Meraki Community All-Star
Meraki Community All-Star

I reported this in another discussion, as there is no this information in the documentation. See the link below.

https://community.meraki.com/t5/Developers-APIs/Wireless-Outbound-Firewall-Rules/m-p/231710#M10407

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

View solution in original post

4 Replies 4

aleabrahao
Meraki Community All-Star
Meraki Community All-Star

I reported this in another discussion, as there is no this information in the documentation. See the link below.

https://community.meraki.com/t5/Developers-APIs/Wireless-Outbound-Firewall-Rules/m-p/231710#M10407

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

Thanks! That's exactly what I needed.

riduque
Cisco Employee
Cisco Employee

I was testing this out and you need to use another field for the IP Version. The field name is ipVer

This is an example of a rule: {'rules': [{'comment': 'Test-L3-Rules', 'ipVer': 'ipv4', 'policy': 'deny', 'protocol': 'tcp', 'destPort': 'Any', 'destCidr': '172.16.16.0/24'}]}

aleabrahao
Meraki Community All-Star
Meraki Community All-Star

It would be interesting to update the documentation on this.

If you see in the other discussion, that was exactly what we identified.

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.