Hi Community!!
Have a location with 3 SSIDs using Meraki DHCP. I've set "Clients Blocked from using LAN" to "Yes", so WLAN users cannot get to the LAN. So WLAN users access to LAN-based printers is disabled.
So the client wants to have only their employees to have access to printers from the WLAN. I can easily do that by changing the "Clients Blocked from using LAN" from Yes to No. But the three SSIDs are used by both the users clients and employees.
I have a full Meraki stack. Is there anyway to set this up so that only certain people have access to the LAN? I don't want to create a separate "employee" SSID.
Thanks!
~Doug
Solved! Go to solution.
Hi Doug,
As already mentioned, firewall rules are the right tool for this job. If you have two groups of users on the same SSID(s), you could use Group Policies to restrict printer access to only one group of users. You could then use tags to assign particular users to groups (or even use existing Active Directory groups, if that's applicable to your environment). You can find all the details on Group Policies in our documentation.
Cheers,
David
I can only come up with complex solutions to your exact requirements.
However if you can relax the requirements so that anyone can access the printers, instead of just employees, then add a wireless firewall rule above the "deny" rule, permitting access to only the printers IP address.
Here is a screenshot of a pretend configuration.
Hello,
The easiest way for you is to create rule that will allow access to local network (printer)
For Example:
Allow - Any - 192.168.100.102 - Any
Hi Doug,
As already mentioned, firewall rules are the right tool for this job. If you have two groups of users on the same SSID(s), you could use Group Policies to restrict printer access to only one group of users. You could then use tags to assign particular users to groups (or even use existing Active Directory groups, if that's applicable to your environment). You can find all the details on Group Policies in our documentation.
Cheers,
David
Group policy can not override WiFi firewall rules.
Hi @PhilipDAth
Actually they can. Please see the documentation I referenced above. I also just tested this to confirm.
Cheers,
David
I stand corrected. Then this makes it much simpler.
This worked for my PC but my android device sees it, but times out adding it. Anyone have success adding a printer through an MX? Mines a mx65w if it matters.