SSIDs ip assignments

dstradley
Comes here often

SSIDs ip assignments

What are the differences between types of Client IP assignments for SSIDs? Meraki DHCP, Local LAN and L3 Roaming...

9 Replies 9
alemabrahao
Kind of a big deal

Meraki DHCP (NAT Mode):

 In this mode, the Meraki Access Points (APs) act as DHCP servers and assign IP addresses to wireless clients from a private 10.x.x.x IP address pool behind a NAT.
This is ideal when wireless clients only need internet access and do not require access to local wired or  wireless resources.


Local LAN (Bridge Mode):

In bridge mode, the Meraki APs act as bridges, allowing wireless clients to obtain their IP addresses from an upstream DHCP server on the local network.
Suitable when wired and wireless clients need to communicate with each other, such as accessing printers or other network resources.


Layer 3 Roaming:

This mode allows a client device to maintain a consistent IP address as it roams across APs located in different VLANs. Meraki's auto-tunneling technology creates a persistent tunnel between the L3-enabled APs and a mobility concentrator.
Essential for large networks, such as campuses, where clients need to roam across multiple VLANs without losing their IP address.

 

SSID Modes for Client IP Assignment - Cisco Meraki Documentation

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
dstradley
Comes here often

Big Deal;

Thanks for the response, makes sense now.

Follow up?

I am a school - students move between classrooms. Should they be set up with the L3 Roaming? Is it more efficient? Or should they be set up as Meraki DHCP, as they are now?

alemabrahao
Kind of a big deal

L3 is only recommended if you have multiple VLANs for the same network, for example it is common to use it in cases where you have a VLAN for each floor of a building.

If you do not have VLAN distinction it is fine to leave it in NAT mode.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
dstradley
Comes here often

Then maybe I want to look at it. I have VLANs for Students, Faculty and Facilities

 

alemabrahao
Kind of a big deal

I don't think I explained it well. It wouldn't be for these cases, for example, on Floor 1 I have VLAN 10 for the student network with the subnet 10.10.10.0/24 and on Floor 2 I have VLAN 20 with the subnet 10.10.20.0/24.

Note that I have different VLANs with different subnets for the same group of users. L3 roaming is useful for these cases.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
dstradley
Comes here often

I understand. that is how we are set up. Student, Facilities and Faculty have separate VLANs and each has its own subnet. 

alemabrahao
Kind of a big deal

No, that's not what I'm talking about. Do you have two different subnets for your student network? L3 roaming is used when the same group of users have different subnets and need to roam between two different subnets. In your case, we're talking about three different groups. There's no reason to use L3 roaming.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
dstradley
Comes here often

Thanks for the info. Now I am following. I will take a look at the article you sent.

cmr
Kind of a big deal
Kind of a big deal

Bridge mode is what you want, then each SSID maps to a single VLAN.  SSID for students maps to student VLAN etc.

If my answer solves your problem please click Accept as Solution so others can benefit from it.
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco ID. If you don't yet have a Cisco ID, you can sign up.