Guest and Internal network

[EdieDudley14020]

My APs are MR42s and MR33s. I have an internal SSID on its own VLAN. Can the internal SSID be locked down to domain users only? I would like to set up a Guest SSID for devices that don't need access to internal resources other than the Internet. How do you assign both SSIDs to the APs?

Thank you,

[MerakiGnome]

Hi @EdieDudley14020

This doc should help you with the Guest SSID piece

https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/Configuring_Simple_Guest_and_Internal_Wireless_Networks

[EdieDudley14020]

Darren,

Thank you but I've already used that document. If my Internal network is vlan 8 with IP range 192.168.30.x and my guest network is vlan 9 with IP range of 192.168.31.x. Will the guest network be able to access the APs. Thier IP address is 192.168.30.x?

[MerakiGnome · Accepted solution]

At the bottom of that link there’s instructions on how to restrict access to the LAN from the SSID Guest:

Navigate to the Configure > Firewall & traffic shaping page.

1. Ensure that the Guest network is selected on the SSID drop-down menu at the top of the page.
2. In the Layer 3 firewall rules section, select Deny from the drop-down menu for the rule labeled Wireless clients accessing LAN.

[EdieDudley14020]

Thank you, Darren. I think I got it. I'll do some testing to be sure.

[Abdulaziz Loonat]

Is it not the switch or firewall that will block routing traffic between the two VLAN's