Cisco Meraki Local Status Page: Overview
Click 日本語 for Japanese
Accessing the local status page
Most Cisco Meraki devices have a local status page that you can access to make local configuration changes, monitor device status and channel utilization, and perform local troubleshooting. This article provides instructions on how to access the local status page, the functions and information available on it, and how to manage and access them.
You can access the local status page of any Meraki device through the web browser of a host machine. By default, users are required to log in to pages that provide configurable options. The local status page uses digest authentication with Message Digest Algorithm 5 (MD5) hashing for the connection between the administering computer and the Meraki device to protect these sensitive settings.
For a device that uses default authentication credentials or has not fetched its configuration, the credentials depend on the firmware version the device is running.
Additional resources
For product-specific steps, refer to the documentation below:
Default credentials when logging in for the first time
The table below lists default login credentials by product family and firmware version.
|
Product family |
Firmware Version |
Username |
Password |
|
All Products |
All other/prior versions |
Serial number of the device (upper case letters and dashes). Same as Cloud ID/Meraki Serial Number in Dashboard |
No password/empty |
|
Switching - MS |
MS 17+ firmware |
admin |
Serial number of the device (upper case letters and dashes). Same as Cloud ID/Meraki Serial Number in dashboard |
|
Switching - Catalyst |
CS 17+ firmware |
admin |
Serial number of the device (upper case letters and dashes). Same as Cloud ID/Meraki Serial Number in dashboard |
|
MX |
MX 19+ firmware |
admin |
Serial number of the device (upper case letters and dashes). Same as Cloud ID/Meraki Serial Number in dashboard |
|
MR |
MR 31.7.1+ firmware |
admin |
Serial number of the device (upper case letters and dashes). Same as Cloud ID/Meraki Serial Number in dashboard |
| MG | MG 4.1.1+ Firmware | admin | Serial number of the device (upper case letters and dashes). Same as Cloud ID/Meraki Serial Number in dashboard |
To ensure the highest level of security and meet evolving regulatory requirements, we are implementing mandatory passwords for all local status page access on devices created after August 1, 2025. For more details, refer to the documentation on Changing Log-In Credentials.
Local status page access by DNS hostname
Each device can be accessed by DNS name if the client traffic passes through the device while browsing the following URLs. This can be useful for determining which which access point (AP), switch, or WAN appliance a client's traffic is going through to reach the internet.
These URLs will work for any Meraki devices listed above, but will only access the first device in its path.
Since the URL below can be used to access the local status page, UDP port 53 is enabled on Meraki devices and will be detected as open by any scanning tool.
MX WAN appliance
Type one of the following URLs in the browser to access the local status page for MX WAN appliances:
MS switch
Type one of the following URLs in the browser to access the local status page for MS switches:
MR access point
To reach MR devices, the client must be wirelessly connected to the AP using a configured service set identifier (SSID) or one of the SSIDs mentioned in the Default SSIDs section, such as "meraki-setup" SSID.
"Type one of the following URLs in the browser to access the local status page for MR access points:"
Cisco Campus Gateway
Type one of the following URLs in the browser to access the local status page for Campus Gateway devices:
MG cellular gateway
Type one of the following URLs in the browser to access the local status page for MG cellular gateways:
Local status page access by IP address
If access by DNS name is not possible, you can access the local status page by IP address. This is often helpful when initially configuring the device on a network without DHCP, or when setting a device's IP configuration prior to deployment.
MX WAN appliances
- Most MX models have a dedicated management port for local status page access.
- All MX models can also be accessed via their LAN IP address.
- By default, MX devices run DHCP. Connect a client to the MX LAN interface, find the client’s IP and default gateway, then open the default gateway IP in a browser.
MS switches
- Some MS switches have a dedicated management port that supports DHCP for client devices. There is no need to set a static IP on your client.
- Alternatively, use the following static IP settings depending on model and firmware:
| Model / Firmware Version | Local Status Page IP | Client IP | Subnet Mask | DNS |
|---|---|---|---|---|
| MS390 & C9300-M (CS 16 and higher) | 198.18.0.1 | 198.18.0.2 | 255.255.255.240 | 198.18.0.1 |
| MS390 & C9300-M (CS 15.21.1 and lower) | 10.128.128.130 | 10.128.128.132 | 255.0.0.0 | 10.128.128.130 |
| All other MS switches | 1.1.1.100 | 1.1.1.99 | 255.255.255.0 | 1.1.1.100 |
MR access points
-
The default IP for the MR access point local status page: 10.128.128.126
Use the following client device IP configuration to access the MR local status page, then browse to the address in a web browser:- IP address: 10.128.128.125
- Subnet mask: 255.255.255.0
Campus Gateway
Type the default gateway IP address in the browser to access the local status page: 198.18.0.1
- Client device IP configuration:
- IP address: 198.18.0.2
- Subnet mask: 255.255.255.240
- DNS: 198.18.0.1
- The Campus Gateway has a dedicated management port.
MG cellular gateway
The LSP for Cellular Gateway devices can be access by typing in the browser the default gateway IP address:
- MG devices run DHCP by default.
- Local status page accessible via the MG cellular gateway’s LAN IP address.
- Connect client to MG LAN interface, find client IP and default gateway, then open default gateway IP in a browser.
Configuring the local status page
Refer to Configuring the Local Status Page documentation for more.
Controlling remote access to the local status page
On MX WAN appliances, access to the local status page is only available to devices via the LAN IP address by default. You can also allow access via the WAN/internet IP.
- Navigate to Security & SD-WAN > Configure > Firewall > Layer 3 > WAN appliance services.
- In the field for Web (local status & configuration):
- When a service is set to "None", the appliance will not respond to requests of that type from the WAN.
- When it is set to "Any", it will respond to requests of that type from any source on the WAN.
- To specify certain IPs or IP subnets that the appliance should respond to, enter the IPs and/or CIDR subnets in a comma separated list.
- Ex. 192.168.13.73/32, 192.168.47.0/24
- Select Save Changes.
Cloud environments
vMX in NAT Mode - steps to Remotely access the local status page in Cloud Environments.
In Azure environment
-
Follow the documentation to complete the setup here.
-
An additional step is required - create "Network security group" > Inbound Firewall Rule:
-
Allow HTTP TCP Port 80,
- The "Src IP address(es)" field - under Security & SD-WAN > Configure > Firewall > Layer 3 > WAN appliance services > Web (local status & configuration) specifies the remote IP addresses allowed to access the WAN appliance’s local web management interface. This setting controls which IPs can connect to the appliance’s web-based status and configuration page.
- Go to the browser and type "http://<Public IP address vMX>"
-
In AWS environment
-
Follow the documentation to complete the setup here.
-
An additional step is required - Go to EC2 > Instances > Security
-
Select the "Security groups" link:
-
-
Select Edit Inbound Rules and Create a new rule "Allow HTTP TCP Port 80"
- The "Src IP address(es)" field - under Security & SD-WAN > Configure > Firewall > Layer 3 > WAN appliance services > Web (local status & configuration) specifies the remote IP addresses allowed to access the WAN appliance’s local web management interface. This setting controls which IPs can connect to the appliance’s web-based status and configuration page:
- The "Src IP address(es)" field - under Security & SD-WAN > Configure > Firewall > Layer 3 > WAN appliance services > Web (local status & configuration) specifies the remote IP addresses allowed to access the WAN appliance’s local web management interface. This setting controls which IPs can connect to the appliance’s web-based status and configuration page:
-
To access the local status page, type the following in the browser:
"http://<Public IP address vMX>"
-
-
For all other devices, the local status page can be accessed by IP after enabling remote device status pages on the Network-wide > Configure > General page. This allows you to connect to the local status page of a Meraki device via its LAN IP over the network.
Disabling the local status page
Administrators can disable the local status page on their devices. The local status page is enabled by default.
The local status page allows administrators to change the IP configuration of their Meraki devices. If the local status page is disabled and a device's current IP configuration does not allow it to contact the cloud controller, the only option will be to perform a factory reset and clear the local configuration (Resetting Cisco Meraki Devices to Factory Defaults article).
The option to enable or disable the local status page is available in the dashboard under Network-wide > General > Device configuration.
If your device has a physical management port, it will always remain active regardless of the value of this setting.
Troubleshooting the local status page
All DNS queries for setup.meraki.com (or any other local status page URL) that route through a Meraki device are intercepted and responded to with an "A record" pointing to the local IP address of the device's local status page interface. If DNS queries for setup.meraki.com (or any other local status page URL) do not pass through the Meraki device in question, the DNS queries will not resolve to the correct local IP address and clients will not be able to reach the local status page. You may also receive an error (example) shown below due to DNS not resolving to the local IP of Meraki device or be redirected to the developer hub.
If a client cannot resolve the local status page, check the following:
- Client is connected to the network and is within the same subnet as the Meraki device.
- DNS is set to the Meraki device IP or to a DNS server that will route through the Meraki device
- Try all relevant local status page URLs (see top of this article)
- Try incognito/private browsing to eliminate potential caching issues
- Ensure if you are hard-wired to turn WiFi off
This issue frequently occurs when the DNS server used by clients on the LAN does not send its DNS queries through the MX WAN appliance. this is the case when the DNS server uses a different default gateway. If this is the case, it can be resolved by either pointing the DNS server through the MX or by creating a specific "A record" in the DNS server to point the appropriate local status page URL to the correct device IP.
If the local status page URLs are still unreachable for some reason, you can also reach the local status page by navigating to the LAN IP of the device in a web browser. For more information about connecting to the local status page using a static IP, refer to the Accessing the Local Status Page section at the top of this article.