Guest WiFi access inside office on mobile devices

[vhouccho]

Hi, has anyone configured this similar situation? I have wireless Meraki 3 of which are MR34 and 1 MR26 firmware are all up to date MR 26.8.3.  I currently configure as bridge and DHCP from a Server.  My next one to create is to have a Guest Wifi, so that we can have guest have internet without interfering our LAN.  Is there a way I can configure this so my users, when they connect their mobile device can still access their work emails?  I am not sure if I need to do something on the DNS side of things, as we have OpenDNS configured as well.  Anyone can give me a guide on how to configure this 

[ammahend]

You want the internal email server access to be allowed for all guest users or for guest users only on their mobile devices ? 

[jagan.chowdam]

My next one to create is to have a Guest Wifi, so that we can have guest have internet without interfering our LAN

You can use Meraki "NAT mode: Use Meraki DHCP" for Guest WiFi without interfering your LAN. Refer the document from the following URL

https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Configuring_Simple_Guest_and_Internal_Wireless_Networks

when they connect their mobile device can still access their work emails?" 

It depends on where is your Email server, where you'll be able to access it securely from internet or not. Can you explain about your email server setup.

CJ

/**Please rate useful responses**/

[vhouccho]

the mail server is 192.168.40.0 subnet.  the local dhcp for meraki is 10.1.1.0 subnet.  the mail server is on another site which we have a site to site established already and all laptops can access emails.  we just cannot put the mobile devices in 10.1.1.0 subnet.  I need to create a guest wifi access for employees for their mobile devices.

[Haydn Andrews]

This based on no security (ACL/ Firewall/ Server FW) outside of the Meraki network:

Yes you can do it

Under the Meraki dashboard:

Wireless> Firewall & Shaping>select your Guest SSID

Add a permit Layer3 firewall rule to your email server on the port/s that it is accessed. Ensure its above the deny any to the RFC 1918 class A-C rules and the default deny any local LAN

[vhouccho]

i cannot follow > is it possible you can show a screen shot?  Her is my screeshot

[ammahend · Accepted solution]

see the screen shot, add the top allowed rule before deny LAN (RFC1918).

There is also an active Meraki community for future reference.