Not Pingable Same Subnet

[FXE]

Hi Guys,

I have an MX firewall acting as the gateway and traffic filtering for my wired and wireless LAN.

In my ACL, I just restrict communication between my guest and my corp WLANs and others are all allowed.

I noticed that I cannot ping the other endpoints under the same VLAN. 

I would like to ask why? Is it by Meraki design? Because i really did not configured any ACLs and I allow the ACL in the wireless. Thank you.

[ww]

Are you certain  the clients itself accept icmp? Is l2 isolation on the APdisabled and L3 local lan allowed?

[FXE]

Hi @ww , yes it is accepting and I tried also to disable the host firewall just to make sure. also, L2 isolation and L3 local lan are disabled and allowed respectively.

[OVERKILL]

Can you ping wired to wired? And as @ww noted, be sure the clients are allowing ICMP responses, Windows 10 blocks them by default. 

[BlakeRichardson]

Windows have blocked ping by default for as long as I can remember. Is the client connected to the same access point? as mentioned L2 isolation might be blocking this traffic. 

[OVERKILL]

Yeah, think that started with XP, but server OS's typically won't block it (depending on the configuration). 

[FXE]

I tried disabling the host firewall but still having the same issue. L2 isolation is also disabled.

[PhilipDAth]

I'm not clear what the scenario is.

Are you saying someone attached to the corporate WiFi is unable to ping something else attached to the same corporate WiFi?

Is "Deny local LAN" enabled?

https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/'Deny_Local_LAN'_settings_in_Cisco_... 

[FXE]

hi @PhilipDAth , basically in any of my wireless LAN, I connected 2x devices which means those should be under the same subnet and it should be able to communicate to each other however, in my case I am not able to ping each other.

host firewall has been disabled, L2 isolation is disabled, and L3 local LAN is set to allow.

[PhilipDAth]

Is the SSID in bridge mode?  This will be a requirement.

[FXE]

Hi @PhilipDAth , yes it is currently in bridge mode.