Skip to main content
Cisco Meraki Documentation

All VLANs can ping the Cisco Meraki AP's LAN Interface

By design, all devices connecting through a Meraki AP can ping the AP's Management Interface, even if they are on different VLANs.

This can be disconcerting when administrators expect ICMP traffic to be denied by their Inter-VLAN routing rules.

For example, a computer connected to a Guest SSID on will be able to ping and AP with an IP address of, even if there are Deny Permissions set on the upstream router.

See Diagram:


All other communication will follow the rules of the Inter-VLAN router.

For additional security, you can set the password by following this Knowledge Base Article:

Change and password

  • Was this article helpful?