The APs are all Meraki, a mixture of MR33 and MR42.
The goal is to keep the guest traffic separate from the rest of the corporate traffic. The guest traffic is all tunnelled to one MX device. setup as a wireless concentrator.
Would the MXs need to be in Routed Mode in order to define traffic separation rules?