Meraki MS - ACL

[Pavan_Pawar]

Hello ,

I have configured the ACL and want to confirm if it also get apply to traffic within VLAN:

Confgi:

VLAN 10

IP -192.168.10.0/24

ACL : 

"comment": "TEST_ACL2",
"policy": "deny",
"ipVersion": "ipv4",
"protocol": "tcp",
"srcCidr": "192.168.10.10/32",
"srcPort": any,
"dstCidr": "192.168.10.11/32",
"dstPort": any,
"vlan": 10

If I send a packet from 192.168.10.10 destined for 192.168.10.11 will it be blocked by ACL as this is local switching traffic?

-Pavan

[Brash · Accepted solution]

Yes, ACL's apply to all traffic going through the switch, including within the same VLAN.

"Any traffic passing through the switch will be evaluated. Even traffic that is not routed."

https://documentation.meraki.com/MS/Other_Topics/Switch_ACL_Operation