Where to create the VLAN

New here

Where to create the VLAN

Hello everyone


I have MX 400 and MS 350.
I have created VLANs in MX 400 until now.
I think there are two ways to create a VLAN that needs to be connected to the Internet.
1: Create a VLAN on the MX 400.
2: Create a VLAN in MS 350 and route it to VLAN 1 (Default) of MX 400.
Please advise which of 1: 2: is more advantageous in terms of security and operation.
Thank you.

4 Replies 4
Kind of a big deal
Kind of a big deal

Managing VLANS on the switches and using L3 routing will be the way to go. 

Thank you for your reply.

Is 2 recommended?
In what situation do you create a VLAN on MX400?

Not using VLAN 1 is pretty much the only suggestion since there is no VTP on Meraki so not to much benifit to staying inside standard VLAN range.

But any VLAN you want to reach other side of MX you will need to configure in MX. Any switch you want to have ability to use VLAN will need VLAN configured.

Layer3 switches you will also want to configure an interface so they can route packets between VLANS. Be sure not to reassign interface IPs when doing this.
Getting noticed



I would rather go as follows:

1. Create the layer 2 VLANs at your MS

2. Create the layer 3 VLANs at your MX


In this way, there are filters and/or security in between VLANs.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.