topic SSID Tunneling in Wireless

SSID Tunneling

fabian.kaltenschnee — Tue, 26 Sep 2023 09:55:52 GMT

i'm trying to set up SSID Tunneling. I used this documentation: SSID Tunneling and Layer 3 Roaming - VPN Concentration Configuration Guide - Cisco Meraki

The MX is in passthrough mode und has a cable in "internet" and Port 3. But i get a BPDU Error on Nexus side on both ports when i insert Port 3. Why is that?

Thanks for your help

Re: SSID Tunneling

Karsten Iwen — Tue, 26 Sep 2023 10:52:06 GMT

How did you cable it? This is the expected topology for passthrough:

https://documentation.meraki.com/MX/Networks_and_Routing/Passthrough_Mode_on_the_MX_Security_Appliance_and_Z-series_Teleworker_Gateway

Re: SSID Tunneling

Ryan_Miles — Tue, 26 Sep 2023 13:51:55 GMT

Passthrough where you connect the WAN port and a LAN port is for placing the MX inline and doing traffic inspection and optional enforcement.

If you want to use the MX for SSID tunneling you should be using concentrator mode topology in which you only connect the WAN port. The MX would typically reside in a DMZ network only connected via its WAN port. All traffic entering and exiting on that same WAN interface.

I show an example topology in this old thread https://community.meraki.com/t5/Wireless-LAN/Reference-architecture-for-Guest-SSID-tunneling/m-p/151519