Appliance Ports

Dashboard Location: Security and SD-WAN > Configure > Addressing & VLANs > Port Configuration

Appliance Port Management

Appliance port configuration in Meraki provides comprehensive LAN port management for network segmentation, VLAN assignment, and access control. This functionality enables organizations to create secure network boundaries, implement network isolation policies, and support diverse connectivity requirements across different network segments. Port configuration supports both trunk and access modes, enabling flexible network architecture designs while maintaining security through granular access policies and VLAN-based network segmentation.

Diagram

Classes

appliance (meraki.domains.organizations.networks)

Name	Type	Constraint	Mandatory	Default Value
ports	List	`[ports]`	No

ports (meraki.domains.organizations.networks.appliance)

Name	Type	Constraint	Mandatory	Default Value
port_id_ranges	List	`[port_id_ranges]`	Yes
enabled	Boolean	`true`, `false`	No
drop_untagged_traffic	Boolean	`true`, `false`	No
type	Choice	`access`, `trunk`	No
vlan	Any	Integer[min: `1`, max: `4094`] or String[matches: `(?:[1-9]	[1-9][0-9]	[1-9][0-9]2
allowed_vlans	Any	Integer[min: `1`, max: `4094`] or String[matches: `(?:[1-9]	[1-9][0-9]	[1-9][0-9]2
access_policy	Choice	`open`, `8021x-radius`, `mac-radius`, `hybris-radius`	No

port_id_ranges (meraki.domains.organizations.networks.appliance.ports)

Name	Type	Constraint	Mandatory	Default Value
from	Any	Integer[min: `1`, max: `24`] or String[matches: `^\d{1,3}$`]	Yes
to	Any	Integer[min: `1`, max: `24`] or String[matches: `^\d{1,3}$`]	Yes

Examples

Example-1: The example below demonstrates appliance port configuration.

This configuration manages MX appliance port settings for WAN connectivity and LAN access, including port-specific configurations for trunking, VLAN assignment, and access policies. It allows flexible network segmentation and supports both multi-VLAN trunk connections and dedicated access ports. Port 5: Configured as an access port on VLAN 10, enabled for active operation. Port 6: Configured as a trunk port allowing VLAN 10, enabled for multi-VLAN traffic toward switches or uplinks. Ports 7-8 and 10: Configured as access ports on VLAN 20, with access_policy: open, allowing unrestricted connectivity for connected devices. Port 9: Configured as a trunk port allowing VLANs 10, 20, 30, enabled for uplinks requiring multiple VLANs. Ports 11-13: Configured as access ports on VLAN 20, enabled for active operation. Port 14: Configured as a trunk port allowing VLAN 20, enabled for multi-VLAN connectivity. All ports are enabled: true, ensuring active operation. Trunk ports support VLAN tagging for switch uplinks, while access ports provide dedicated VLAN connectivity for end devices. This configuration enables flexible and secure network segmentation tailored to different connectivity requirements.

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          networks:
            - name: !env network_name
              product_types:
                - appliance
                - switch
                - wireless
                - camera
                - sensor
                - cellularGateway
              appliance:
                ports:
                  - port_id_ranges:
                      - from: 5
                        to: 5
                    enabled: true
                    type: access
                    vlan: 10
                  - port_id_ranges:
                      - from: 6
                        to: 6
                    enabled: true
                    type: trunk
                    allowed_vlans: 10
                  - port_id_ranges:
                      - from: 7
                        to: 8
                      - from: 10
                        to: 10
                    enabled: true
                    type: access
                    vlan: 20
                    access_policy: open
                  - port_id_ranges:
                      - from: 9
                        to: 9
                    enabled: true
                    type: trunk
                    allowed_vlans: 10,20,30
                  - port_id_ranges:
                      - from: 11
                        to: 13
                    enabled: true
                    type: access
                    vlan: 20
                  - port_id_ranges:
                      - from: 14
                        to: 14
                    enabled: true
                    type: trunk
                    allowed_vlans: 20