apply policy group to a vlan that does not live in MX

[EnriquePeSa]

hello community!

I have a meraki MX where the SVIs of my LAN live and without problem I can create and assign a policy group per VLAN, now I need to download all the vlans to a switch core (meraki) but I cannot assign the policy group to the vlan, it exists any settings to fix it?

[alemabrahao]

You can apply group policy per VLAN using a Radius server.

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying...

[PhilipDAth]

If you mean, you need to make a Meraki switch the layer 3 core - then no you can't do group policy on the switch per VLAN.  In fact, most group policy functionality is lost in this case.

[Maumarti]

Thinking you may be speaking of this topology, and if you set the client tracking by IP in that MX-only network, it should be possible for you to manually assign group policies by client IP. 

Alternative that is more automated could be MX Active Directory integration.

[PhilipDAth]

>if you set the client tracking by IP in that MX-only network, it should be possible for you to manually assign group policies by client IP

Negative.  "tracking by IP" only affects reporting (such as the clients page) and nothing else.  You can only attach group policies to a client when the client uses the MX as its default gateway (it must be layer 2 adjacent).

Group policies are always attached to a MAC address.

[Maumarti]

AH, it was kind of the back of my mind, but completely forgot. Thanks for the reminder, PhilipDAth! The power of the community! I stand corrected.