Set Up Umbrella for a Meraki Network
This section describes how to configure the Meraki network to use the Umbrella IP addresses: 208.67.222.222 and 208.67.220.220.
There are two ways in which you can configure your Meraki networks to use Umbrella. The first is to use DHCP to distribute the Umbrella server IP information directly to clients. This is available on all Meraki platforms. The second method, available only on MX Security Appliances and Z1 Teleworker Gateways, is to configure the MX itself to use the Umbrella servers and to proxy client DNS requests to those same servers.
Table of Contents
Prerequisites
- Administrative access to Meraki.
- The MR26.1+ firmware version. For more information, see Manually Integrating Cisco Umbrella with Meraki Networks.
Configure Umbrella for Clients
For MX Security Appliances
- From your cloud dashboard, select Security Appliance > Configure > DHCP.
- Under the DHCP scope you wish to configure, choose Use OpenDNS from the DNS nameserver drop-down list. DHCP must be enabled for the desired subnet for this option to appear.
For MS Switches
- From your cloud dashboard, select Switch > Configure > Routing and DHCP.
- Select the route you wish to modify the DHCP service for, and choose Use OpenDNS from the DNS nameservers drop-down list under DHCP Settings.
DHCP must be enabled for the desired subnet for this option to appear.
For more information on how to configure the DHCP server for MX Security Appliances and MS Switches, see Configuring DHCP Services on the MX and MS.
For MR Access Points (NAT Mode SSIDs only)
- From your cloud dashboard, select Wireless > Configure > Access Control.
- Select the SSID you wish to configure, and select Custom DNS from the Content filtering drop-down under Addressing and Traffic.
- Enter in the Umbrella server IP addresses: 208.67.222.222 and 208.67.220.220.
Configure Meraki Network to Proxy DNS to Umbrella
(MX Security Appliance and Z1 Teleworker Gateway only)
Note: Static IP configuration for the MX and Z1 devices must be performed locally and cannot be done through the cloud dashboard. Once logged into the local status page, browse to the Uplink Configuration page and configure the DNS settings to use 208.67.222.222 and 208.67.220.220 under IP Assignment. This method can only be used with Static IP addressing.
For more information on how to access the local configuration, see
Using the Cisco Meraki Device Local Status Page.
- From your cloud dashboard, select Security Appliance > Configure > DHCP.
- Under DNS nameservers, select Proxy to upstream DNS.
Meraki Cloud-Managed Networks and Umbrella DNS < Set Up Umbrella for a Meraki Network > Configure DNS Forwarder for Umbrella
Updated about 1 year ago