Switch Ports Configuration

Dashboard Location: Switching > Switch Ports

Physical Port Management and Configuration

Switch ports configuration in Meraki networks provides administrators with comprehensive control over individual switch port settings, enabling granular network access control, VLAN assignment, security policies, and performance optimization at the port level. This functionality supports network segmentation, access control policies, voice VLAN configuration, storm control, spanning tree protocol settings, and advanced features like MAC address filtering and port scheduling. Switch port configuration is essential for implementing secure network access, optimizing network performance, enforcing organizational policies, and maintaining network stability through proper port-level controls.

Diagram

Classes

switch (meraki.domains.organizations.networks.devices)

Name	Type	Constraint	Mandatory	Default Value
ports	List	`[ports]`	No

ports (meraki.domains.organizations.networks.devices.switch)

Name	Type	Constraint	Mandatory	Default Value
name	String	min: `1`, max: `127`	No
tags	List	String[min: `1`, max: `255`]	No
enabled	Boolean	`true`, `false`	No
type	Choice	`access`, `routed`, `stack`, `trunk`	No
vlan	Any	Integer[min: `1`, max: `4094`] or String[matches: `(?:[1-9]	[1-9][0-9]	[1-9][0-9]2
voice_vlan	Any	Integer[min: `1`, max: `4094`] or String[matches: `(?:[1-9]	[1-9][0-9]	[1-9][0-9]2
allowed_vlans	Any	Integer[min: `1`, max: `4094`] or String[matches: `(?:[1-9]	[1-9][0-9]	[1-9][0-9]2
stp_guard	Choice	`bpdu guard`, `disabled`, `loop guard`, `root guard`	No
link_negotiation	String	min: `1`, max: `127`	No
udld	Choice	`Alert only`, `Enforce`	No
access_policy_type	Choice	`Custom access policy`, `MAC allow list`, `Open`, `Sticky MAC allow list`	No
mac_allow_list	List	MAC	No
sticky_mac_allow_list	List	MAC	No
sticky_mac_allow_list_limit	Integer	min: `1`, max: `10`	No
peer_sgt_capable	Boolean	`true`, `false`	No
dai_trusted	Boolean	`true`, `false`	No
profile	Class	`[profile]`	No
dot3az	Boolean	`true`, `false`	No
poe	Boolean	`true`, `false`	No
isolation	Boolean	`true`, `false`	No
rstp	Boolean	`true`, `false`	No
storm_control	Boolean	`true`, `false`	No
flexible_stacking	Boolean	`true`, `false`	No
port_ids	String	Regex: `\d{1,3}`	No
port_schedule_name	String	min: `1`, max: `127`	No
access_policy_name	String	min: `1`, max: `127`	No
adaptive_policy_group_name	String	min: `1`, max: `127`	No

profile (meraki.domains.organizations.networks.devices.switch.ports)

Name	Type	Constraint	Mandatory
enabled	Boolean	`true`, `false`	No
iname	String	min: `1`, max: `127`	No
name	String	min: `1`, max: `127`	No

Examples

Example-1: The example below demonstrates switch port configuration using tested YAML configuration from pipeline fixtures.

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          networks:
            - name: !env network_name
              product_types:
                - appliance
                - switch
                - wireless
                - camera
                - sensor
                - cellularGateway
              devices:
                - name: !env access_switch_01
                  switch:
                    ports:
                      - port_ids: 5,7,10,11,12
                        name: User Port
                        tags:
                          - tag1
                        enabled: true
                        type: access
                        vlan: 1
                        voice_vlan: 100
                        allowed_vlans: 1-100
                        isolation: true
                        rstp: true
                        stp_guard: bpdu guard
                        link_negotiation: Auto negotiate
                        port_schedule_name: "Weekend Only Port Schedule"
                        udld: Enforce
                        # access_policy_type: Custom access policy
                        # access_policy_name: Test Policy
                        # mac_allow_list:
                        #   - 00:11:22:33:44:55
                        # sticky_mac_allow_list:
                        #   - 00:11:22:33:44:55
                        # sticky_mac_allow_list_limit: 1
                        storm_control: true
                        adaptive_policy_group_name: "USERS"
                        # peer_sgt_capable: false
                        # flexible_stacking: false
                        # dai_trusted: true
                        # profile:
                        #   enabled: true
                        #   name: "vlan profile"
                        #   iname: test
                        # dot3az:
                        #   enabled: true
                - name: !env dmz_switch_01
                  switch:
                    ports:
                      - port_ids: 3-5,7
                        name: User Port
                        tags:
                          - tag1
                        enabled: true
                        type: access
                        vlan: 1
                        voice_vlan: 100
                        allowed_vlans: 1-100
                        isolation: true
                        rstp: true
                        stp_guard: bpdu guard
                        link_negotiation: Auto negotiate
                        port_schedule_name: "Weekend Only Port Schedule"
                        udld: Enforce
                        access_policy_type: Custom access policy
                        access_policy_name: Test Policy
                        # mac_allow_list:
                        #   - 00:11:22:33:44:55
                        # sticky_mac_allow_list:
                        #   - 00:11:22:33:44:55
                        # sticky_mac_allow_list_limit: 1
                        storm_control: true
                        # adaptive_policy_group_name: "Corp Policy"
                        # peer_sgt_capable: true
                        # flexible_stacking: false
                        dai_trusted: true
                        # profile:
                        #   enabled: true
                        #   name: "vlan profile"
                        #   iname: test
                        # dot3az:
                        #   enabled: true