APs pinging google dns constantly

[sysad43]

Has anyone else seen this? All of my Merkaki APs constantly ping google dns, which my firewall thought was a threat and shunned it causing some other issues. How do I stop the APs doing this? I ran a packet capture and it does indeed come from the AP via the wired interface.

[ww^]

You cant stop it. All meraki devices do this.

https://documentation.meraki.com/General_Administration/Other_Topics/Upstream_Firewall_Rules_for_Cloud_Connectivity

https://community.meraki.com/t5/Switching/Meraki-Switch-sending-out-pings-to-Google-DNS-CONTINUOUSLY/m-p/32214

[sysad43]

Seems unneccesary, but Ive excluded google dns from shun to work around it for now. Not ideal.

[MerakiHell]

Did you know they also ping regulary to yahoo and few other providers.. if you block them from doing such it will show on the portal that the devices are offline... bad design.. we have 300+aps and they generatoa tone of rubish trafic... i imagine the meraki dashboard isnt stable enough to use it for Ping and DNS lookups...

[sysad43]

Yes, still annoying 2 years later. Im trying to troubleshoot a firewall problem and meraki pinging google is number one event in syslog.

[joey.debra]

There is a little thing like grep to filter your output.
The devices will always do their uplink tests that is supposed to continue working even if dashboard is down for any reason (maintenance or issue) And they do have a good track record in that. So yes AP's, switches will do the pinging. For the rest they will send telemetry data to dashboard.

[sysad43]

Id rather they didnt do it so often as my firewall treats its as a scanning attack. 40 different devices pinging google every 5 seconds. Our APs do not need such critical metrics.

[DainBrammage]

Should be easy to filter it then