Home > Wireless LAN > Other Topics > Alternate Management Interface on MR Devices

Alternate Management Interface on MR Devices

Overview   

In traditional Meraki network deployments, management traffic such as Syslog reports, responses to SNMP polling and communication to RADIUS servers, is sourced from the LAN IP - the address of the device's default management VLAN. Because this VLAN is also used by the MR device to communicate with the Meraki Dashboard, it has connectivity to the Internet.

 

Security policies in certain deployments may mandate isolation of management traffic from the public networks. The Alternate Management Interface feature provides for this option by enabling an MR series access point to source its management traffic from an IP address other than that of the default management-VLAN.

 

Alternate Management Interface on MR is supported on firmware releases MR26.x and onwards.

Flow of Traffic with Alternate Management Interface

Traffic for the services selected under the Alternate Management Interface configuration is routed using the default-gateway of the Alternate Management VLAN. Sourcing this traffic from the IP address of the Alternate Management VLAN allows us to avoid any overlap and ensure that the return traffic from servers can be separated from the public network.

 

AMI - traffic flow.png

 

Configuring the Alternate Management Interface  

Configuring the Alternate Management VLAN and Associated Services

 

To enable the Alternate Management Interface, navigate to Network-wide > General. The configuration options can be found under the section Alternate Management Interface if the network-type is Wireless and under Wireless Alternate Management Interface if the network-type is Combined.

 

AMI - single network.png

 

When enabled, this configuration section allows us to specify the alternate management VLAN, and choose a combination of services, from amongst RADIUS, SNMP and Syslog, to which the Alternate Management Interface configuration would be applicable.

Configuring the Alternate Management IP and Network Settings

Once the Alternate Management Interface has been configured, the options to specify the interface details will become available on the Access Point details page. To configure the Alternate Management Interface for an MR access point, navigate to Wireless > Access Points and select the device you wish to configure. 

 

AMI - wireless configuration.png

 

Last modified

Tags

Classifications

This page has no classifications.

Explore the Product

Click to Learn More

Article ID

ID: 8008

Explore Meraki

You can find out more about Cisco Meraki on our main site, including information on products, contacting sales and finding a vendor.

Explore Meraki

Contact Support

Most questions can be answered by reviewing our documentation, but if you need more help, Cisco Meraki Support is ready to work with you.

Open a Case

Ask the Community

In the Meraki Community, you can keep track of the latest announcements, find answers provided by fellow Meraki users and ask questions of your own.

Visit the Community