Yes, this is fairly simple with Meraki, you would configure your Guest SSID to provide access after clicking through a splash page, then be firewalled off from the local LAN so they would only be able to egress via the Internet path and have no access to local LAN resources, and also run in NAT mode so that every guest client will get a seemingly random 10.x.x.x IP address and will also be firewalled/isolated from other guest devices (called client isolation). Also be sure on the Firewall & Traffic Shaping page to set a per-client bandwidth limit like maybe 5Mbps per client so no single device can hog too much bandwidth. You could also set a per-SSID bandwidth limit for the entire guest SSID, so for example if you only have 100Mbps of Internet, you could set the SSID limit at 20Mbps, so all guests combined could not take away more than 20% of your overall Internet bandwidth. And if you'd also like to do some basic adult site content filtering, that is also supported when the Guest SSID is running in NAT mode. This Support doc should help get you going and you can always open a support ticket if something doesn't seem to be working as expected. https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Configuring_Simple_Guest_and_Inte... and there's also a blog post that walks through the basics here https://meraki.cisco.com/blog/2013/09/secure-guest-access-in-3-steps/