How to control the Bonjour forwarding from specified source vlan to destination vlan

[VincentZHU]

Hi,all

How I control the Bonjour forward from specified source vlan to destination vlan

My scene has total 3 floors, two SSIDs and per vlan/subnet per floor for each SSID, detail as below.

SSID-A

1F:vlan 101 with bonjour-serivice-1F

2F:vlan 102 with bonjour-serivice-2F

3F: vlan 103 with bonjour-serivice-3F

SSID-B

1F:vlan 201

2F:vlan 202

3F:vlan 203

And I want to client of SSID-B on 1F only can see bonjour-service-1F,and client of SSID-B on 2F only can see bonjour-serivice-2F ,etc.

But when I enable bonjour forwarding in SSID-B with destination vlan 201/202/203, all bonjour-service-xF can be seen in each floor.

How I control bonjour forwarding with special source vlan?

Thanks

[VincentZHU]

For MX bonjour forwarding,I can config "Service VLANs" and "Client VLANs",but at MR bonjour forwarding, I can only config destination VLAN ID i.e. Service VLANs. unfortunately,I didn't deploy MX in my network.

How if I only allow VLAN 101 and 201 on access switch trunk port at 1F, and allow VLAN 102 and 202 at 2F?

Thanks to your help.

[PhilipDAth]

I can only think of horribly nasty solutions.  If it was me, I would re-visit the fundamental design and ask questions about what the actual intent is of the requirements.  I would try and engineer a different solution.

Back to the nasty.

I think this *might* be achievable on MR by definfing the *same* SSID but configured to forward to the VLAN on the floor, and then to use SSID availability tagging to only enable the SSID with the matching vlan tags for just the APs on that floor.

https://documentation.meraki.com/MR/Other_Topics/SSID_Availability

For example;

• on SSID-B, create the SSID with forwarding to VLAN201.  Then only apply this SSID to APs on floor 1F.
• on SSID-B, create the *same* SSID (again) with forwarding to VLAN202.  Then only apply this SSID to APs on floor 12.

The WiFi SSID screen in Merai will show 3 identically configured SSID-A and thee identical SSID-B (aparting from the VLAN forwarding) based on your example.

I did say it was nasty.

[GreenMan]

Access Points are Layer-2 devices only - if you want traffic to flow between VLANs you need a Layer-3 capable device;  a router or Layer-3 switch or an appropriate routing security device, like an MX.