public ip addresses used for API calls to my Meraki enviroment?
Hi all,
I would like to limit the API access to my Meraki enviroment. What public IP addresses does LM use to do the API calls to my Meraki enviroment?
joopv
Posted 3 years ago·Last reply 3 years ago
8 comments
LM User
·3 years ago@mnagel is right.
The <??> in your question is “the public IP address(es) of your collector(s) that the Meraki networks are assigned to”. Your collector reaches out to api.meraki.com with your creds to make the query and returns the data to the collector. The collector then ships that data back to the LM platform.
mnagel
·3 years agoThe question was “what IP addresses do I add in the Meraki allowlist to enable API access?”. The answer is “Yours”. Access originates from your collectors not from LM-owned systems.
joopv
OP3 years agoI think there is some miscommunication, or maybe i don't understand fully how Logicmonitor works.
The Meraki sd-wan of the customer which i'm trying to make more secure is managed and monitored from the Cisco/Meraki dashboard.
The API calls are made from <??> to this Meraki-hosted dashboard (api.meraki.com/…..) which has continuous overview of the whole sd-wan with several 1000's of devices.
https://documentation.meraki.com/General_Administration/Other_Topics/Cisco_Meraki_Dashboard_API
API calls are not made to the individual components or networks of the sd-wan but only to this api interface of the dashboard.
LM User
·3 years agoRun this code on your collector debug console by issuing !groovy and pasting in the code. You don’t need to select a device:
For those paying attention, this is the basis for a really easy configsource that you can apply to all your collectors so you can see whenever it changes.
mnagel
·3 years agoNo, those are used for website checks originating from LM systems. API calls like those for Meraki originate from your collectors, which use your local Internet access path.
joopv
OP3 years agoThanks,
So the API calls are made from the addresses at the bottom of this page?
https://www.logicmonitor.com/support/services/about-services/what-are-services
Because this article is about ping and http get tests, API calls are not mentioned here.
mnagel
·3 years agoThat would be your collector egress addresses. Generally the only LM-originated access would be from the website check source addresses (documented in the support site).