Meraki AP's Bandwidth Segregation

Solved
Harikishan
Comes here often

Meraki AP's Bandwidth Segregation

We have 60 AP's and a firewall in our organization. how to segregate bandwidth for each AP's can anyone suggest any idea about this?

1 Accepted Solution
PhilipDAth
Kind of a big deal
Kind of a big deal

!$@%#  That is not the right design.

 

Use a single SSID, and then iPSK to create a virtual WiFi environment (called a WPN) for each apartment.  Each apartment will have its own PSK to use.

https://documentation.meraki.com/MR/Encryption_and_Authentication/Wi-Fi_Personal_Network_(WPN)

 

"iPSK Without RADIUS" will support up to 2500 (or is it 5000?) WPNs.

https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_Authentication_without_RADIUS

 

View solution in original post

7 Replies 7
GreenMan
Meraki Employee
Meraki Employee

I think you're going to need to provide some more information about what it is that you have  (is the firewall a Meraki MX?) and what you are actually trying to achieve.    I suspect it's unlikely you need to segregate bandwidth for individual APs, though you might be able to do that by running all SSIDs in NAT mode and using traffic shaping on the MX.

 

Maybe more likely you want to apply a per-client or a per-SSID bandwidth limit?

https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Traffic_and_Bandwidth_Shaping

Harikishan
Comes here often

Hi,

We currently have a setup of 60 apartments, each equipped with its own access point. However, we've encountered a limitation with Meraki, which supports a maximum of 15 SSIDs. As a result, we are unable to create 60 SSIDs to adequately segregate bandwidth for each apartment.

 

our current infrastructure setup. We are utilizing an MX105 firewall, the MS425 is implemented as our core switch and For access switching, we have deployed the MS225

PhilipDAth
Kind of a big deal
Kind of a big deal

!$@%#  That is not the right design.

 

Use a single SSID, and then iPSK to create a virtual WiFi environment (called a WPN) for each apartment.  Each apartment will have its own PSK to use.

https://documentation.meraki.com/MR/Encryption_and_Authentication/Wi-Fi_Personal_Network_(WPN)

 

"iPSK Without RADIUS" will support up to 2500 (or is it 5000?) WPNs.

https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_Authentication_without_RADIUS

 

Harikishan
Comes here often

Thanks, Philip. I hope it will work on my scenario👍

cmr
Kind of a big deal
Kind of a big deal

You could set the port on the switch that the AP is connected to to 10Mbps or another value...  Though that isn't something I'd actually recommend.  As @GreenMan said, what are you trying to achieve?

GreenMan
Meraki Employee
Meraki Employee

Given your scenario, I'd look at using a common SSID for everyone, but with WPN:

https://documentation.meraki.com/MR/Encryption_and_Authentication/Wi-Fi_Personal_Network_(WPN)

Probably using iPSK without RADIUS

You might want to consider an onboarding app, such as that offered by SplashAccess (covererd in principle in the doc above) to make the setup more readily user-friendly and admin-light.

 

GreenMan
Meraki Employee
Meraki Employee

Sorry @PhilipDAth - you probably realised I didn't see your own post regarding WPN / iPSKwoR, before I put mine on...   At least we basically said the same thing!  😁

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels