Make sure the AP's are on a network that can reach meraki cloud on UDP/7351.  And if you are on a newer firmware version also have them allow TCP/443 outbound.  And if you are using a firewall that does SSL decryption, don't let the firewall do that because it messes up the connection. ... View more