Hey @Roey1984 , If indeed you only have users of one type and the count of users is not too high (lower than 200) than your design makes perfect sense. The main considerations are as follows: 1) If you have mainly north south traffic (local to internet) and not too much traffic between VLANs then it is easiest to directly terminate your VLAN's on your MX. 2) It is always recommended to isolate your Meraki gear on separate VLAN's. That makes firewall rules more consistent or perhaps some other functions like using the management IP's of switches and AP's on an authentication server or syslog server. Wether you throw your switches and access points in one VLAN or in separate VLAN's is entirely up to your design. On a personal note: if I have a customer where I want to put AP's and switches together I usually use the lower IP's for the switches and start numbering AP's from .100. Then I also reserve some space above .200 for DHCP space. Even if you use static IP's on your Meraki devices it is always recommended to have a small DHCP pool so if you have a new device or factory defaulted a device it can reach the cloud on it's own without your intervention to collect it's configuration. 3) Usually switches get a fixed IP in my designs but you don't have to log into each switch for that. If they reach the cloud through the DHCP server from previous point you can configure their fixed IP from dashboard or API. You can ofcourse stick fully to DHCP but that's entirely up to you. I hope this helps.
... View more