I need a Meraki MS switch with dedicated management port

[redsector]

Hello, I need a list of MS switches which have a dedicated management port for a special project. Or: how and where I can see (online) if the switch has such an port?

[alemabrahao]

I'm pretty sure it doesn't exist, why would you need a dedicated management port?

[redsector]

Oly the managed port should be in the entire network.

[redsector]

I need this for a WAN solution. We replace the Cisco Catalyst switches, they have an own management-port to avoid traffic from WAN comes to intranet. So the ports are WAN but the managementport ist in LAN.

[alemabrahao]

I'm sorry, I think that you can achieve it with MS 225.

https://documentation.meraki.com/MS/MS_Overview_and_Specifications/MS225_Overview_and_Specifications

[Boyan1]

Why does it matter if the management port is a "physical thing" like an RJ45 jack that you plug a cord into and call it "management" traffic or simply an "internal RJ45 logical port" that you don't see but it's the same thing -- a management VLAN? 

[Johnrc]

The purpose of a management port is to ensure that no routing of traffic takes place through that port.  You can have a switch dedicated to be used for a Firewall DMZ passing isolated traffic.  the management port would allow you to manage this device from the local LAN and not compromise the security of this network

[alemabrahao]

For Meraki devices this doesn't make much sense.

[Ryan_Pascoe]

Hi @redsector , I think you are meaning a kind of WAN breakout switch? Meraki switches just need a way to get to the internet for dashboard management on its Logical Management IP. You can just connect a physical port to the LAN of the site for dashboard access and prune VLAN's accordingly to avoid bridging networks.

In the case that you are connecting internet services if the switch can get an IP on the CE/PE subnet i.e. ISP provides a /29 then this can work for management. In the case you are using MPLS the same applies provided you can get to the internet on your MPLS network. 

We do have the concept of an Alternative Management Interface which is a logical (not physical) interface for sending RADIUS/SNMP and Syslog messages via an alternative path - but is only supported on MS210 and above

https://documentation.meraki.com/MS/Other_Topics/Alternate_Management_Interface_on_MS_Devices