Firewall Policy Layer 3 base on mac address

[Black]

How to make policy Firewall Layer 3 Lan Network base on mac address client

[ww]

You can create a group policy

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying...

On the dashboard client view you can "add client" mac and assign the policy

[Black]

can u show it sir. im try it not work

[ww]

[Black]

Device policy by default rule deny any any, that mean new device can't access internet or tunnel. 

And then i create new rule policy device allow any any for user lan access internet or tunnel. 

But big problem mr33 down because mac address mr33 can't show for move rule allow any any

[alemabrahao]

On the client list go Add client so put the mac address and select allow list:

[Black]

Meraki MR33 mac address hide, not show at mx client, but manual add mac address and input group device allow any any that working? 

[alemabrahao]

It is not shown because he never connected to the network, my suggestion is to create an exclusive management network for the APs and create a group policy allowing everything and applying the VLAN Interface. You are over-complicating something that is supposed to be simple.

[Black]

Ya, im mean discconecting. 

Only management, but for user wifi and lan same segment? 

so complicated this network, not my design. and I have to solve all cases with existing network. 

I'm not familiar with Meraki, need a guide

Im sorry sir 😁😁😁

[alemabrahao]

Just add the client as explained before and It will work:

Meraki has a lot of articles and documentation that can help you.

https://documentation.meraki.com/MR/Group_Policies_and_Block_Lists/Pre-configure_Network_Policy_for_...

[alemabrahao]

You don't need to ask for sorry, It's a pleasure to help.

[alemabrahao]

And yes, It will work.