Using The Same Object Group For Source And Destination On A Rule

[Zac123]

Hey all:

Say I have these two objects:

Object1 = 192.168.1.0/24

Object2 = 192.168.2.0/24

Say I have an MX64 with two VLANs:

VLAN1 IP = 192.168.1.1/24

VLAN2 IP = 192.168.2.1/24

Say I don't want these subnets to talk to each other.  Could I make an object group including both the above objects and then use that group as the source and destination in a deny firewall rule?  It makes sense to me, I just haven't done it before on Meraki.

[KarstenI · Accepted solution]

Yes, you can do that in with the MX.