Layer 3 routing capabilities are available on most Cisco Meraki switches. This allows the switches to route traffic between VLANs in a campus network without the need for an additional layer 3 device.
In order to enable and configure layer 3 routing on MS switches, a layer 3 capable switch is required.
|MS225||16 interfaces/16 static routes||1024|| |
DHCP Server + Relay
Warm Spare (VRRP)
Multicast Routing (PIM-SM)
In order to route traffic between VLANs, routed interfaces must be configured. Only VLANs with a routed interface configured will be able to route traffic locally on the switch, and only if clients/devices on the VLAN are configured to use the switch's routed interface IP address as their gateway or next hop.
To start using layer 3 routing, navigate to the switch details page by going to Switch > Monitor > Switches and clicking on the switch to be configured. Under Status > L3 routing status, click Configure layer 3 settings .
The window that appears will allow the configuring of the first routed interface and a default route. It is recommended that the uplink VLAN be configured first.
When complete, click Save, or Save and add another to configure additional routed interfaces immediately.
To configure additional layer 3 interface for additional VLANs:
In this example below, the 'Data' VLAN has been configured to use remote DHCP server for client requests.
Once created, any layer 3 interfaces or static routes will appear under Switch > Configure > Layer 3 routing.
Note: Each switch can only have a single L3 interface per VLAN.
In order to route traffic elsewhere in the network, static routes must be configured for subnets that are not being routed by the switch or would not be using the default route already configured. Such as if another portion of the network was located behind a router or another layer 3 switch downstream from the Cisco Meraki layer 3 switch being configured.
To create a new static route:
To modify an existing layer 3 interface or static route on a specific switch:
In order to delete a layer 3 interface or static route:
Note: A switch must retain at least one routed interface and the default route. The default route cannot be manually deleted.
In order to disable layer 3 routing, any configured static routes and layer 3 interfaces must be deleted in a specific order.
Performing these steps out of order will result in an error and not allow the route/interface to be deleted.
The management IP is treated entirely different from the layer 3 routed interfaces and must be a different IP address. It can be placed on a routed or non-routed VLAN (such as in the case of a management VLAN independent from client traffic). Traffic using the management IP address to communicate with the Cisco Meraki Cloud Controller will not use the layer 3 routing settings, instead using its configured default gateway. Therefore, it is important that the IP address, VLAN, and default gateway entered for the management/LAN IP still provide connectivity to the Internet. The management interface cannot have a gateway of it's own L3 interfaces.