cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Guest traffic on Meraki MX versus an ASA

SOLVED
Here to help

Guest traffic on Meraki MX versus an ASA

How do we handle Guest wireless traffic on Merak MX (MX84)? With ASA you can create a NAT rule that allows you to keep your Guest traffic on a separate WAN IP than your CORP traffic. It looks like this is not a function on the MX yet. What can we do to separate this traffic?

HM
1 ACCEPTED SOLUTION

Accepted Solutions
Kind of a big deal

Re: Guest traffic on Meraki MX versus an ASA

That's not possible on an MX I'm afraid. As you're not using the second uplink atm... couldn't you connect the second port to the same provider device with the second IP address?

View solution in original post

6 REPLIES 6
Kind of a big deal

Re: Guest traffic on Meraki MX versus an ASA

I assume your guest traffic is on a separate VLAN and subnet. With flow preferences you can specify which uplink their traffic needs to take:

Screen_Shot_2016-07-26_at_5.10.05_PM

Here to help

Re: Guest traffic on Meraki MX versus an ASA

Thanks for the reply,

 

There is only 1 uplink with multiple available IP addresses. Let's say that x.x.x.1/29 is the IP for CORP traffic, I want x.x.x.2/29 to be what we use for Guest traffic. We whitelist the CORP IP on AWS, so I don't want users on Guest network to have the same access as CORP. This is how the ASA is currently configured without issue.

HM
Kind of a big deal

Re: Guest traffic on Meraki MX versus an ASA

That's not possible on an MX I'm afraid. As you're not using the second uplink atm... couldn't you connect the second port to the same provider device with the second IP address?

View solution in original post

Here to help

Re: Guest traffic on Meraki MX versus an ASA

Thanks, Yes I should be able to.

HM
A model citizen

Re: Guest traffic on Meraki MX versus an ASA

That would be the best approach if you are able to
Here to help

Re: Guest traffic on Meraki MX versus an ASA

got it Thanks! 

HM
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.