cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3657
Views
2
Helpful
5
Replies

External Website(s) Blocked - How?

jjeffery
Level 2
Level 2

Hello

I'm deploying MR36 units in our office.

We have a Ruckus-based WiFi in production. Traffic over our guest WiFi is allowed (via our Firewall).

I've added a guest WiFi with our Meraki units (which again has to route out via our Firewall) but I'm finding some traffic is blocked (traffic that is allowed via the Ruckus).

Where do I need to look to work out why this is happening? Presumably the traffic is being passed out so is there a Meraki Firewall service doing the blocking?

5 Replies 5

Brash
Meraki Community All-Star
Meraki Community All-Star

Meraki AP's can implement firewall rules on SSID's.

Look under wireless -> firewall and traffic shaping in the dashboard

Thanks, yes, I've seen that but I don't recall changing the Firewall settings from the defaults.

To double-check I created a new temp SSID and compared. The only thing that's different in the first SSID is that Local LAN is set to Deny (which is what we want)

aleabrahao
Meraki Community All-Star
Meraki Community All-Star

if it's allowed on the ssid, this is probably not a Meraki issue. Is the Client IP assignment set to Bridged or NAT?

If you are using NAT, the IP of the AP is used to make the accesses, so it may be that you have some blockage in the APs network.

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

In order to segregate guest devices from our office network I set it to "Meraki AP assigned (NAT mode)".

aleabrahao
Meraki Community All-Star
Meraki Community All-Star

So, try to find some log on your firewall coming from the AP IP.

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
Review Cisco Networking for a $25 gift card