FirewallDNS
    Network Equipment

    How to Change DNS on Cisco Meraki MX

    By [FILL IN], [FILL IN] · Last updated

    Meraki hands out DNS through the DHCP settings of each VLAN.

    Before you start

    You need a FirewallDNS account (see pricing). Sign in to your dashboard, register your public IP address and copy your DNS server addresses. Replace <FIREWALLDNS-PRIMARY> and <FIREWALLDNS-SECONDARY> below with them.

    Step by step

    1. Open Security & SD-WAN > Configure > DHCP.
    2. For each VLAN, set DNS nameservers to "Use custom nameservers".
    3. Enter <FIREWALLDNS-PRIMARY> and <FIREWALLDNS-SECONDARY> on separate lines.
    4. Save. Optionally add a Layer 3 firewall rule to deny UDP/TCP 53 to anything other than the FirewallDNS addresses.
    5. For the uplink, go to Security & SD-WAN > Appliance status > Uplink and set DNS to the FirewallDNS addresses.

    Verify it works

    1. Renew DHCP on a client (Windows: ipconfig /renew, macOS: reconnect Wi-Fi).
    2. Run nslookup example.com and check which server answered.
    3. Open the live log in your dashboard. New lookups should appear within seconds.

    Learn more

    Not protected yet?

    FirewallDNS costs $2.90 per device per month.