WiFi client isolation but using Layer 3 roaming with a concentrator

[Network-dad]

Hello Everyone,

So we currently have our Guest network setup in NAT mode: Use Meraki DHCP.. We are looking to improve the guest experience and don't want them disconnecting and re-authenticating as the walk around our locations.. With that said I was planning on using Layer 3 roaming with a concentrator but I want client isolations... any tips on setting this up? Is VPN: tunnel data to a concentrator better and how do I ensure client isolation. 

[PhilipDAth]

If you want the best experience, bridge the SSID to a VLAN.  Use the "Deny Local LAN" option.

https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/'Deny_Local_LAN'_settings_in_Cisco_... 

https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Wireless_Client_Isolation