We have setup a Meraki NAT SSID  with Meraki firewall rules to allow though certain ports to our main network and servers. This is to segregate such devices from accessing fully our main LAN.   However we have noticed that this network seems slower (even pings are 10 times longer) even from the same AP than our bridged\ L3 network SSID connected devices that are part of our LAN.    Is this an expected slowness due to the NATing required? Is there anything we can do to speed it up or do we need to rethink how we acheive this via VLANs etc?   Thanks ... View more

We have setup an SSID that uses Merak NAT mode using 10.x.x.x DHCP. We have setup a content filtering to  use a custom DNS of our internal DNS servers to resolve.  We have setup L2 rules in Firewall & Traffic Shaping to allow this SSID clients access to these servers and local Win2012R2 DNS server on port 53 TCP & UDP   Most devices seem to work fine. However some Android devices seem to bypass this and go out to the Meraki DNS 10.254.254.254 and cannot resolve the internal server name. We understand after some reading that some Android versions with particular secuity updates seem to force connection to encrypted DNS servers (Meraki)  ahead of our local DNS server We have tried to block all ports and protocols to 10.128.128.128 but this does not seem to force to use the local DNS server. The IP address of our WiFi connected clients PDNS is still 10.128.128.128 rather than local   Any thoughts as to what we can do to force clients to local DNS servers?   Many thanks ... View more