Firewall IP's & Ports for device registration to Meraki Cloud

[DarrenOC]

Good Morning All,

Quick query, just revisiting some sites where we've previously configured specific rules to allow devices to register out to the Meraki Cloud.  The majority of the rules talk from source IP (Internal Network) to the same Destination IP's within Meraki's cloud using set ports such as 443, 80, 7351 etc...  

Source_IP	Destination_IP
Your network(s)	64.62.142.12/32, 209.206.48.0/20, 216.157.128.0/20, 158.115.128.0/19

Prevously we'd been quite granular using the information provided in the Help section of the dashboard but then i've noticed that the final rule is pretty much an allow all between Source and Destination as above using ICMP.  This rule overrides everything above it as we need to allow all TCP, UDP, IP so we could just use a single rule - allow all ports between source and destination as per the table above?

[ww · Accepted solution]

Icmp is a specific protocol,  its not udp or tcp. 

So if you want to keep using specific rules you should allow the icmp protocol to that ip adresses 

[DarrenOC]

Cheers @ww , complete brain fog this morning. Yep, if I click on the source/destination protocol there it is…ICMP4/6.  Cheers