Meraki AP's Bandwidth Segregation

[Harikishan]

We have 60 AP's and a firewall in our organization. how to segregate bandwidth for each AP's can anyone suggest any idea about this?

[GreenMan]

I think you're going to need to provide some more information about what it is that you have  (is the firewall a Meraki MX?) and what you are actually trying to achieve.    I suspect it's unlikely you need to segregate bandwidth for individual APs, though you might be able to do that by running all SSIDs in NAT mode and using traffic shaping on the MX.

Maybe more likely you want to apply a per-client or a per-SSID bandwidth limit?

https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Traffic_and_Bandwidth_Shaping

[Harikishan]

Hi,

We currently have a setup of 60 apartments, each equipped with its own access point. However, we've encountered a limitation with Meraki, which supports a maximum of 15 SSIDs. As a result, we are unable to create 60 SSIDs to adequately segregate bandwidth for each apartment.

our current infrastructure setup. We are utilizing an MX105 firewall, the MS425 is implemented as our core switch and For access switching, we have deployed the MS225

[PhilipDAth · Accepted solution]

!$@%#  That is not the right design.

Use a single SSID, and then iPSK to create a virtual WiFi environment (called a WPN) for each apartment.  Each apartment will have its own PSK to use.

https://documentation.meraki.com/MR/Encryption_and_Authentication/Wi-Fi_Personal_Network_(WPN)

"iPSK Without RADIUS" will support up to 2500 (or is it 5000?) WPNs.

https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_Authentication_without_RADIUS

[Harikishan]

Thanks, Philip. I hope it will work on my scenario👍

[cmr]

You could set the port on the switch that the AP is connected to to 10Mbps or another value...  Though that isn't something I'd actually recommend.  As @GreenMan said, what are you trying to achieve?

[GreenMan]

Given your scenario, I'd look at using a common SSID for everyone, but with WPN:

https://documentation.meraki.com/MR/Encryption_and_Authentication/Wi-Fi_Personal_Network_(WPN)

Probably using iPSK without RADIUS

You might want to consider an onboarding app, such as that offered by SplashAccess (covererd in principle in the doc above) to make the setup more readily user-friendly and admin-light.

[GreenMan]

Sorry @PhilipDAth - you probably realised I didn't see your own post regarding WPN / iPSKwoR, before I put mine on...   At least we basically said the same thing!  😁