topic Re: Guest and Internal network in Wireless

Guest and Internal network

EdieDudley14020 — Mon, 17 Mar 2025 20:13:57 GMT

My APs are MR42s and MR33s. I have an internal SSID on its own VLAN. Can the internal SSID be locked down to domain users only? I would like to set up a Guest SSID for devices that don't need access to internal resources other than the Internet. How do you assign both SSIDs to the APs?

Thank you,

Re: Guest and Internal network

MerakiGnome — Mon, 17 Mar 2025 20:20:37 GMT

Hi @EdieDudley14020

This doc should help you with the Guest SSID piece

https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/Configuring_Simple_Guest_and_Internal_Wireless_Networks

Re: Guest and Internal network

EdieDudley14020 — Mon, 17 Mar 2025 20:27:05 GMT

Darren,

Thank you but I've already used that document. If my Internal network is vlan 8 with IP range 192.168.30.x and my guest network is vlan 9 with IP range of 192.168.31.x. Will the guest network be able to access the APs. Thier IP address is 192.168.30.x?

Re: Guest and Internal network

MerakiGnome — Mon, 17 Mar 2025 20:34:02 GMT

At the bottom of that link there’s instructions on how to restrict access to the LAN from the SSID Guest:

Navigate to the Configure > Firewall & traffic shaping page.

Ensure that the Guest network is selected on the SSID drop-down menu at the top of the page.
In the Layer 3 firewall rules section, select Deny from the drop-down menu for the rule labeled Wireless clients accessing LAN.

Re: Guest and Internal network

EdieDudley14020 — Mon, 17 Mar 2025 20:41:42 GMT

Thank you, Darren. I think I got it. I'll do some testing to be sure.

Re: Guest and Internal network

Abdulaziz Loonat — Thu, 20 Mar 2025 09:22:58 GMT

Is it not the switch or firewall that will block routing traffic between the two VLAN's