10-10-2017 12:24 PM
Hi Community!!
Have a location with 3 SSIDs using Meraki DHCP. I've set "Clients Blocked from using LAN" to "Yes", so WLAN users cannot get to the LAN. So WLAN users access to LAN-based printers is disabled.
So the client wants to have only their employees to have access to printers from the WLAN. I can easily do that by changing the "Clients Blocked from using LAN" from Yes to No. But the three SSIDs are used by both the users clients and employees.
I have a full Meraki stack. Is there anyway to set this up so that only certain people have access to the LAN? I don't want to create a separate "employee" SSID.
Thanks!
~Doug
Solved! Go to Solution.
10-11-2017 12:56 AM
Hi Doug,
As already mentioned, firewall rules are the right tool for this job. If you have two groups of users on the same SSID(s), you could use Group Policies to restrict printer access to only one group of users. You could then use tags to assign particular users to groups (or even use existing Active Directory groups, if that's applicable to your environment). You can find all the details on Group Policies in our documentation.
Cheers,
David
10-10-2017 03:08 PM
I can only come up with complex solutions to your exact requirements.
However if you can relax the requirements so that anyone can access the printers, instead of just employees, then add a wireless firewall rule above the "deny" rule, permitting access to only the printers IP address.
Here is a screenshot of a pretend configuration.
10-10-2017 03:10 PM
Hello,
The easiest way for you is to create rule that will allow access to local network (printer)
For Example:
Allow - Any - 192.168.100.102 - Any
10-11-2017 12:56 AM
Hi Doug,
As already mentioned, firewall rules are the right tool for this job. If you have two groups of users on the same SSID(s), you could use Group Policies to restrict printer access to only one group of users. You could then use tags to assign particular users to groups (or even use existing Active Directory groups, if that's applicable to your environment). You can find all the details on Group Policies in our documentation.
Cheers,
David
10-11-2017 12:58 AM
Group policy can not override WiFi firewall rules.
10-11-2017 02:08 AM
Actually they can. Please see the documentation I referenced above. I also just tested this to confirm.
Cheers,
David
10-11-2017 11:36 AM
I stand corrected. Then this makes it much simpler.
10-11-2017 07:46 PM
12-03-2017 03:57 PM
This worked for my PC but my android device sees it, but times out adding it. Anyone have success adding a printer through an MX? Mines a mx65w if it matters.
12-19-2018 01:53 PM
@Ponch, Hey did you ever get a solution for your android devices?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide