How to block Inter-Vlan Routing Cisco Meraki MX64

[Hamidsattarrana]

Hello,

I have following LAN networks.

LAN1 >>> Vlan1  >>> 192.168.128.0/24

LAN2 >>> Vlan10 >>> 10.10.10.0/24

LAN3 >>>Vlan200 >>> 192.168.200.0/24

I want to block LAN1 and LAN2 to access LAN3. I created rules under outbound rules but they are not working. Please check the screenshot below

I think I am doing something wrong. Because when I ping from Vlan1 and Vlan10 it still works.

Please let me know what I am missing.

Thanks in Advance

[marce1000]

  - You could also post this in https://community.meraki.com/t5/Security-SD-WAN/bd-p/security

  M.

[Hamidsattarrana]

Hello, 

Thanks for you suggestion.

https://community.meraki.com/t5/Security-SD-WAN/How-to-block-Inter-Vlan-Routing-Cisco-Meraki-MX64/m-p/257371#M57255

[Philip D'Ath]

I can't read you screenshots rules - buy you do need to create ordinary layer 3 firewall rules.
https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Using_Layer_3_Firewall_Rules

Note that layer 3 firewall rules don't apply to traffic originating from the MX itself (and I can see from your screenshot you have done a ping test from the MX).