Cisco Meraki Firewall Rules

Article 000001873 · Updated Oct 2, 2025 · 5,783 views

This article is specific to the Cisco Meraki equipment, for more general networking information see our Networking Guidelines.

Setting up Access Rules

  1. Log into the dashboard at https://account.meraki.com/login/dashboard_login?go=
     
  2. Click Configure on the left side of the screen.
     
  3. Click Firewall on the left side of the screen.
     
  4. Enter the access rules as shown below.

    NOTE: In the image below, the access rules do not include 208.89.108.0/22, but need to. The image below was taken before the 208.89.108.0/22 range of IP addresses was purchased by Nextiva. When setting up access rules in a Cisco Meraki, remember to add 208.89.108.0/22 as well as 208.73.144.0/21

    image.png
     
  5. Save the changes.
     

DNS Server Configuration

Nextiva suggests using Google DNS servers for your router or firewall; however, if you have different DNS servers that are used, you are welcome to use them instead.  The steps below outline how to configure the Meraki firewall for Google's DNS servers.

 

  1. Log into the dashboard at https://account.meraki.com/login/dashboard_login?go=
     
  2. Locate the DHCP option, usually under Security Applicance.

    image.png
     
  3. Click the drop-down menu and select Use Google Public DNS next to DNS nameservers.

    image.png
     

Traffic Shaping (QoS) Rules

  1. Log into the dashboard at https://account.meraki.com/login/dashboard_login?go=
     
  2. Locate Traffic Shaping, usually located under Security Appliance.

    image.png
     
  3. Under Traffic Shaping Rules select Create a new rule.
     
  4. Select Add+
     
  5. Select Custom Expressions and enter the following required information:
     
    1. Custom Expressions: 208.73.144.0/21
       
  6. Select Add expression.
     
  7. Enter the following information:
     
    1. Custom Expressions: 208.89.108.0/22
       
  8. Select Add expression.
     
  9. Click out of the window and select the following information:
     
    • Enable SpeedBurst: Disabled/Unchecked
       
    • Bandwidth Limit: Ignore network per-client limit (unlimited)
       
    • Priority: High
       
    • DSCP tagging: 46 (EF – Expedited Forwarding, Voice)
       
  10. Verify the rules are entered correctly and select Save Changes.

    image.png
     
Still need help with this?
Contact support