You're probably forgetting something, it seems very much a layer 2 problem.
Have you tried connecting the ATA directly to the MX on a port in access mode on the target VLAN?
I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.
Please, if this post was useful, leave your kudos and mark it as solved.