Block port 50001 across MX Auto-VPN?

[PeterJames]

Hi,

Can anyone advise the easiest way to block port (50001) traffic across our sites.

MX Range with Auto-VPN.

Thank you,
Peter James

[ww]

https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior

[charles07 · Accepted solution]

Just create a VPN firewall rule;

1. Security & SD-WAN > Configure > Site-to-site VPN
2. Under "Organization-wide settings"
3. Add a "Site-to-site outbound firewall" rule
4. Policy: Deny
   Protocol: Select UDP or TCP
   Source: any
   Src port: any
   Destination: any
   Dst port: 50001

Do the same for "Site-to-site inbound firewall" rule too.

[ww]

inbound does not work, see previous link.

---

@charles07 wrote

Do the same for "Site-to-site inbound firewall" rule too.

---