Thank you for your advise. It appears that issues was with the switch, as ip routing wasn't enabled, and after enabling it routing start working as expected. ... View more

I am using VLAN 1515 and VLAN 2020 for two different SSID's   The port where AP is plugged in is in trunk mode with the following VLAN's, 1,1515, 2020 along with native VLAN 1. Below is the extract from my switch config.   Default gateway is .1 address on the switch where switch provide DHCP services to the AP. In my case, I have static routes for VLAN 1515 and 2020 assigned on the Cisco NGFW device and pointing to the uplink address on the switch.   Just spotted that in my config VLAN 1 doesn't have any IP assignment, but not sure what has to be there. On my Cisco NGFW I have VLAN 1 with the subnet which is used for Meraki AP.     Config ! ! no ip domain lookup ip dhcp excluded-address 192.20.20.0 192.20.20.1 ip dhcp excluded-address 192.15.15.0 192.15.15.1 ! ip dhcp pool WIFI network 192.15.15.0 255.255.255.0 default-router 192.15.15.1 dns-server 8.8.8.8 8.8.4.4 lease infinite ! ip dhcp pool WIFI-S network 192.20.20.0 255.255.255.0 default-router 192.20.20.1 dns-server 8.8.8.8 8.8.4.4 lease infinite ! ! ! no ip igmp snooping vlan 1011 login on-success log ipv6 nd raguard policy HOST_POLICY ! udld enable ! interface GigabitEthernet0/0 vrf forwarding Mgmt-vrf ip address 10.66.102.2 255.255.255.0 negotiation auto ! interface TenGigabitEthernet1/0/1 description Uplink switchport mode trunk ip arp inspection trust logging event trunk-status load-interval 30 ip dhcp snooping trust ! interface TenGigabitEthernet1/0/2 switchport trunk allowed vlan 1,1011,1515,2020 switchport mode trunk speed auto 5000 ip dhcp snooping trust ! ! interface Vlan1 no ip address ! interface Vlan5 description In-band Management ip address 192.168.5.10 255.255.255.0 ! interface Vlan35 description Uplink ip address 175.35.69.2 255.255.255.248 ! interface Vlan100 description Data ip address 192.168.100.10 255.255.255.0 ! interface Vlan1515 description WIFI ip address pool WIFI ! interface Vlan2020 description WIFI-S ip address pool WIFI-S !    ... View more

My gateway resides on the router, then via uplink onto the switch with vlan's allow all and the onto the switch port with native vlan 1, then allowed vlan's list is 1,1515 (represents SSID),2020 (and another SSID).  Management is untagged on meraki AP. ... View more

Karstenl, You was right in terms of NAT and Native VLAN, it brought switch online along with AP. However, I am strugle with DNS resolustion for both meraki devices and wonder what could couse that. ... View more

I jhave made the above changes and i am able to ping meraki switch IP, however it is still unable to reach meraki cloud. From Cisco I am able to ping any external ip address as well as internal, I did check packet tracer and it allows all subnets to outside interface in ACL. Current config: On Meraki I keep native Vlan 1 with allow all vlans and on Cisco subnet from VLAN 1 has been moved onto the interface as gateway (.1). ... View more

Unfortunatelly, on cisco 1120 I do not have ability to configure interface as VLAN unless I am missing something, this option I believe only available on cisco 1010. Below is a screen shot form FMC @KarstenI wrote: If you configure VLAN 1 as a subinterface on FTD, you don't have a native VLAN. You need to confgure your VLAN1 settings on the main interface. But to be sure better post screenshots of your settings. ... View more