How to pass VLANs on remote APs.

[Martinez_e]

Hello, my question is the following, I have to migrate the WiFi network from a WLC to Meraki, the issue is that between the WLC and the APs I am passing all the VLANs through the capwap tunnel, in addition the traffic goes out through the WLC in separate interfaces such as the Visitor VLAN that is directly connected to a port between the WLC and the Firewall, the question is how can I replicate this configuration in remote sites for the APs???

The APs I am using are MR57 model.

[KarstenI]

You can tunnel the traffic to an MX VPN concentrator at the main office as described in this document:

https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/SSID_Tunneling_and_Layer_3_Roamin...

[Martinez_e]

Hi KarstenI.

We actually discussed this possibility with the client and he doesn't like it. Is there another way for guest users to access the Internet through the central site like in the WLC?

[Martinez_e]

Hi KarstenI.

I forgot to tell you that, at this moment we only have Meraki APs, the rest of the equipment is Cisco C2960x Switches plus two Cores, one model C9300 and the other is a C9407, both in separate Data Centers.

[KarstenI]

It's a different system that operates differently. You need some tunnel, and this is how it is implemented in the Meraki world. Regardless of whether it is liked or not ... 😉 The MX concentrator is the component that takes the role of the CAPWAP tunnel endpoint for data.

[Martinez_e]

Even more difficult if the solution is to add a team that was not quoted.😢

[KarstenI]

There are countless times I think, "If they just came here to ask before they started to implement it" ...

[DarrenOC]

Just a thought, what about placing your guest traffic at the remote sites in a separate VRF and routing that traffic back to your main site?  Not a tunnel but your guest traffic is segmented.

There’s a lot of questions to be asked and a lot of depends but worth exploring?