Users not able to access internal shares when on Wifi

Alok.Prabhakar · ‎02-23-2022

Users are connected to Wifi which are Meraki APs. Those are connected to a cisco 2960 switch as upstream.(where all the configurations are present) When users connect to one SSID they can not access the internal shares but other things like internet access and all works fine. I even tried pinging the server on which the shares are hosted but got request timed out error. Meraki TAC confirmed its all good from their end as APs are passing traffic.

Anyone has any idea on this. elp is much appreciated

Jon Marshall · ‎02-23-2022

Check routing between vlans assuming clients are different vlan to server and also check for acls on the L3 interfaces.

Difficult to be more precise as you have provided so little information.

Jon

Alok.Prabhakar · ‎02-23-2022

Thanks Jon.

We will try that, I can not give the complete details as it would give out the specific details about the network.

The users are from remote office and the server is in DC. We have a DMVPN tunnel established. They can access shares when connected through LAN or VPN. Only when they are on Wifi those are not working. We have created separate vlans for the different SSIDs.

marce1000 · ‎02-23-2022

- As Jon states : you first need to get the basic connectivity going (ping - for instance) and or the vlans associated with the SSID's must have connectivity to the 'sharing-servers' too.

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Georg Pauwen · ‎02-24-2022

Hello,

can you post a screenshot of the 'Appliance status' page (Security & SD-WAN --> MONITOR) ?

paul driver · ‎02-24-2022

Hello
Can you confirm if the switchport connected to the meraki AP is a trunk and its allowing all vlans in your network

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

Alok.Prabhakar · ‎02-24-2022

interface GigabitEthernet1/0/4
description Meraki Back Room
switchport trunk native vlan 203
switchport trunk allowed vlan 200-203
switchport mode trunk
no power efficient-ethernet
spanning-tree portfast trunk

paul driver · ‎02-24-2022

Hello

Do those vlans allowed on the trunk incorporate where those network shares reside?
Is there any access policy applied on the meraki ap or on the L3 interfaces.

As a test, From the L3 device that's routes for your vlans can you ping those network shares sourced from the wifi clients ssid vlan(s)

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul