Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Become a member of the Cisco Meraki Community today
Get answers from our community of experts in record time.
Join now- About ChristophW
About ChristophW
ChristophW
Here to help
Member since Apr 25, 2023
Jan 7 2025
Community Record
15
Posts
0
Kudos
0
Solutions
Badges
Jan 7 2025
5:44 AM
So we have the same problem since months. Is it really possible to block incoming packets with layer 7 rule blocking remote ip range? Or is it only the answer-packets? Is there no option to subscribe to thread-lists to block malicious ips before getting this "allowed" entry?
... View more
Aug 14 2024
4:07 AM
I forgot to update my comment. It did not work for my native vlan. Had to add it too. It was a mistake from my side.
... View more
Aug 14 2024
12:48 AM
Hi together, I had the same question right now and my traffic can reach the native vlan on the other side when not including it in the allowed vlan list. Did this change?
... View more
Aug 1 2024
6:54 AM
Does the DNS-Snooping work when in the mx dhcp-server on the dns-server "proxy to uplink dns" ? I have a problem only blocking pings to one site. Nothing special...
... View more
Mar 13 2024
1:43 AM
I have a specific question regarding this setup but with an split-tunnel. So local-breakout but content-filtering (URL-Block and allow-list) on the remote site. Does this Content-Filtering apply only to traffic to the wan-interface or also on the vpn to the central-site? Do i need to allow specific internal urls which are reachable through the auto-vpn to the central site also?
... View more
Mar 13 2024
1:01 AM
I think there is nothing new here. We gave up on a solution for the terminal-server. Our customer created a new vlan for different group-policies. How they want to handle it on the terminal-server i do not know that. Maybe a second port with the different ips or something.
... View more
Oct 30 2023
11:55 PM
Thank you two for the informations. @BillyC Are your printers running DHCP? unfortunately my customer does not run DHCP on their printers. So when they are "silent" there is no traffic from them until they get used.
... View more
Oct 24 2023
5:21 AM
We use dynamic vlan, right. I know alcatel-lucent works in the way that it deletes the vlan from the port when the mac ages out. Thats the whole problem i see if meraki does that too, noone can communicate to the device anymore.
... View more
Oct 24 2023
5:12 AM
Have to check. But the main question is, if arp requests still reaches the printer because it should stay authenticated and associated to the vlan when it was authenticated in the past.
... View more
Oct 24 2023
5:10 AM
No re-auth-timer is configured. I know from other vendors, that if the mac-address ages out, the association of the port to the specific vlan is delete also. I have to test if some problems occur. But maybe someone has some experience in this scenario.
... View more
Oct 24 2023
1:39 AM
Hello together, unfortunately i do not find any information how meraki handles the vlan association with silent devices. For example i have an printer which gets send to VLAN 111 on an Port with Radius-Authentication and Access-VLAN 1. The printer goes into sleep-mode and does not send any packets. Now someone wants to print something on this printer and needs to contact the printer in vlan 111. Does the switch forgets the VLAN-Association on the port where the printer got connected with the mac-aging-time? Thanks everyone.
... View more
Jul 5 2023
8:02 AM
We have this same issue for one of our networks. Do you have an workaround for it yet? Or did you buy something else wich supports terminalserver agents? Or does the mapping work now?
... View more
© 2025 Cisco Systems, Inc.
