Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I think the only way that a ssid stops broadcasting (automatically) is when you use the MR ssid to a mx tunnel concentrator. https://documentation.meraki.com/Wireless/Design_and_Configure/Configuration_Guides/Client_Addressing_and_Bridging/SSID_Tunne...
Its recommended to connect it to downstream switch(es)https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair#Recommended_Topologies
Can you share that link? As far as i know its only used for dashboard accesshttps://documentation.meraki.com/Platform_Management/Dashboard_Administration/Operate_and_Maintain/Managing_Dashboard_Access/Configuring_SAML_Single_Sign-on_for_Dashboard
That does not work. Every mx need a (non meraki tunnel) ipsec to azure. The only way to get this working is using the bgp over ipsechttps://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Configuration_Guides/Site-to-site_VPN/BGP_rou...