Meraki

Cain · ‎Sep 18 2020

I don't but I probably should... I work for a large telco here in AUS so I need to be careful with regards to IP etc.

Cain · ‎Sep 18 2020

Indeed this is my current work around. I have a webhook that fires off a Python script that modifies the layer 7 rules when the WAN link changes. It's a bit of a hack but it works. There is a beta feature for cellular firewall rules but it seems limited to layer 3 rules. I may be able to manually group some layer 7 rules into a "Object" and use the new beta object rules filtering.

Cain · ‎Sep 17 2020

Hey mate, Yes I did read that on a previous post but regardless from what I can see the cellular rules are only layer 3. I really need to apply different layer 7 rules.

Cain · ‎Sep 17 2020

Hi All, Just throwing this out to the community. I have a client that has a large network with branches having MX67W and an attached MG21. The second WAN port(MG21) is primarily used for failover but some sites do use it for load balancing. Question: Is there a way I can apply layer 7 firewall rules to the WAN2 port thereby limiting the type of traffic across the 4G modem? For example I want to block all gaming sited when using the MG21 link. Thanks,

Cain · ‎Aug 29 2020

Hey mate, All you(your team) need is something that has Internet access and Python 3 installed. You need to install the Meraki Python library (make sure to install version 0.x.x - pip3 install meraki==0.x.x) one of their example files is called org_wide_clients_v0.py Have a look at their github page: https://github.com/meraki/dashboard-api-python you can modify this script to output just what you need.

Cain · ‎Aug 29 2020

I think you should be able to achieve this with System manager MDM and a sentry policy. But this becomes a device solution rather than a user solution. For example if user x connects from their MDM enrolled iPad/PC then apply a sentry policy to assign them to a group that has VLAN x firewalled.

Cain · ‎Aug 27 2020

The Meraki API is your friend. You could very easily dump all clients to a CSV file and use grep (or Ctrl-F in excel) to find the offending IP address. Lots of information is available to you with regards to the association to AP/SSID and networks etc.

Meraki

Community

About Cain

Cain

Community Record

Badges

Re: Assign layer 7 rules to WAN2

Re: Assign layer 7 rules to WAN2

Re: Assign layer 7 rules to WAN2

Assign layer 7 rules to WAN2

Re: Meraki - Find the Network and AP/SSID a client is connected to given th...

Re: Is it possible to configure multiple VPNs for different client VLANs?

Re: Meraki - Find the Network and AP/SSID a client is connected to given th...

Re: Meraki - Find the Network and AP/SSID a client is connected to given th...