Guest and Internal network

[Dudley5526]

My APs are MR42s and MR33s. I have an internal SSID on its own VLAN. Can the internal SSID be locked down to domain users only? I would like to set up a Guest SSID for devices that don't need access to internal resources other than the Internet. How do you assign both SSIDs to the APs?

Thank you,

[DarrenOC]

Hi @Dudley5526 

This doc should help you with the Guest SSID piece 

https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/Configuring_Simple_Guest_and_Int...

[Dudley5526]

Darren,

Thank you but I've already used that document. If my Internal network is vlan 8 with IP range 192.168.30.x and my guest network is vlan 9 with IP range of 192.168.31.x.  Will the guest network be able to access the APs. Thier IP address is 192.168.30.x?

[DarrenOC · Accepted solution]

At the bottom of that link there’s instructions on how to restrict access to the LAN from the SSID Guest:

Navigate to the Configure > Firewall & traffic shaping page.

1. Ensure that the Guest network is selected on the SSID drop-down menu at the top of the page.
2. In the Layer 3 firewall rules section, select Deny from the drop-down menu for the rule labeled Wireless clients accessing LAN.

[Dudley5526]

Thank you, Darren.  I think I got it. I'll do some testing to be sure.