Group Policies (VLAN): No internet only local system

[Lourdes]

Hi I just want to ask how do you configure a vlan policy having no internet connection only connected to local system? 

[CptnCrnch]

What exactly are you trying to achieve? A Meraki system without Internet access is rather uncommon.

[Lourdes]

Well meraki will still have an internet access but, your client who is connected to a certain port of your meraki switch will have no internet access but can connect to your internal system. 

You will be using group policies (via vlan) to do that. Any idea how to configure this on a meraki firewall? 

[CptnCrnch]

Set up firewall rules to only allow your internal systems and block everything else.

Of course this depends on your internal IP address management, but e.g. allowing RFC1918 addresses would be the easiest option. Stripping it down to only these systems that particular endpoint should be able to reach would of course be even more favourable. 😉

[ww · Accepted solution]

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying...

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying...