Hello everyone,   We are currently configuring individual rules in the layer 3 configuration of the MX Firewall section to block inter-VLAN traffic.   Let’s suppose that we have 100 VLANs which should be totally isolated, anytime that a new VLAN is added, many individual rules must be manually created. I have already discussed this with Meraki support and they say that using L3 firewall rules is indeed the method they recommend to block inter-VLAN traffic.   They do not have an automation feature available directly on this, but it is possible to perform rules updates using the dashboard API rather than manually. Do you have any recommendation for this? We would like to understand the best practices to block inter-vlan traffic in the Meraki structure and also avoid manual configurations whenever possible.   Thanks. ... View more

Hi there,   I have read the article below which shares concepts related to general Cisco best practices on VLANs.    http://www.ciscopress.com/articles/article.asp?p=2181837&seqNum=11   Please see the concepts below mentioned in the article above.   A good security practice is to separate management and user data traffic. The management VLAN, which is VLAN 1 by default, should be changed to a separate, distinct VLAN. A recommended security practice is to change the native VLAN to a different VLAN than VLAN 1. The native VLAN should also be distinct from all user VLANs.  I would like to know what are the best practices which you usually implement in the Meraki world. Could you please share some insights? I am basically planning to use a random number for the native VLAN in a new environment which is going to be deployed in some days.   Thanks!   Federico ... View more