#: The sequence number of a particular firewall rule.Group policy layer 3 firewall rules can be based on protocol, destination IP (or FQDN for MX and Z-series appliances), and port.Īn explanation of the fields in a Layer-3 firewall rule is shown below. Note: Layer 3 firewall rules are stateless when configured within Meraki Dashboard group policies. If no rules match, the default rule (allow all traffic) is applied. The first rule that matches is applied, and subsequent rules are not evaluated.

On the MX, outbound traffic refers to traffic originating from one VLAN that is destined for another VLAN or traffic originating from the LAN that is destined for the Internet or a remote network that is located over a static LAN route. This article discusses how to use Layer 3 Firewall rules on MR series access points, MX Security Appliance or Z-series Teleworker gateways.Ī layer 3 firewall rule on the MX or Z-series appliance is stateful and can be based on protocol, source IP address and port, and destination IP address (or FQDN) and port. Layer 3 firewall rules on the MR are stateless and can be based on destination IP address and port. Dashboard presents the rules in numeric order, they are evaluated from top to bottom beginning with rule number 1. With the MR series, outbound traffic refers to client traffic originating from the wireless network that is destined for the wired LAN or Internet. Layer 3 Firewall rules provide an administrator granular access control of outbound client traffic.

Meraki firewall