2 VLAN for Same SSID Meraki AP with Radius Authentication
Can you create 2 VLANS to use one SSID for Meraki MR55 with Radius Authentication? I want to create the same global SSID for upstairs/downs but I want the downstairs clients to get a VLAN 160 IP address and I want the upstairs clients to get a VLAN 170 IP address. How can this be done using one SSID? Can I create two 802.1X connection policies (1 for VLAN 170 and 1 for VLAN 160)? in Radius clients I have two APS downstairs APs *with downstairs subnet* and upstairs AP *with upstairs subnet* Will it be smart enough to connect and recognize coming from same ssid which vlan to come on to? does it matter the order in the connections request/network policies tabs https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_...
does the order matter? When I put VLAN 170 upstairs in second after VLAN 160 downstairs(these are example vlans). I tried to connect since my downstairs AP is behind me and I am downstairs but it would not let me access (it authenticated me but said not internet)
When I moved the order where VLAN 160 was set as # 1 for processing order, I was able to connect. Switch downstairs has VLAN160 but not VLAN 170. Switch upstairs has VLAN 170 but not VLAN 160.
Looks good to me, although I think you can (maybe should?) turn off the radius override stuff for this test. Also assuming there are not any other access points involved, should be fine leaving the 'all other APs' to 1 as well.