As Per Meraki this is SGT order of operation for Adaptive policy
however usually most switch ports have VOIP and DATA both where PC is connected to Phone in 2 different vlan, now if I assign a TAG to this port will that TAG apply for voice and data packets both ?? if Yes then how do I tag voice traffic with a different SGT, unless I am going 802.1X (which many people don't). other option is IP-SGT mapping and if I do IP - SGT mapping, the static port SGT will overwise SGT-IP mapping as per order of operation. I guess I can create 2 seperate IP-SGT mapping, one for VOIP another for DATA and not tag the port, but then the problem is its IP dependent and any VLAN miss match on port can potentially change how policy is applied to an endpoint bypassing security.
