Disallow access to other device but still access another VLAN
A client of ours wants to setup multiple SSID's for each of their 'teams' and separate them using VLANs and L3 firewall rules. We are trying to talk them out of this and just doing 3 SSID's a guest, private, and a team making those teams connect to the "Team" SSID and making it so none of the devices can communicate with each other. We know you can accomplish this by using the meraki DHCP but they also have a network printer that those devices will also need to connect to on another VLAN. Is it possible to make it so they can communicate to the printer vlan but not to other devices on the "team" vlan?
I have a laptop on the "Team" SSID using VLAN 2 and need to print to a printer on VLAN 1. However, I should not be able to setup a network share or ping from my laptop to my desktop if both the devices are on the same "Team" SSID.