The "zones" are going to be VLANs. Hopefully the DIA and MPLS will plug directly into your MX making that bit simple. You may end up running the MPLS via a VLAN via the switch instead to keep it being routed. You can read about creating MX VLANs here: https://documentation.meraki.com/MX/Networks_and_Routing/Configuring_VLANs_on_the_MX_Security_Appliance You'll need a trunk port between the MX and your MS. Then on your MS just make ports connecting to other end devices access VLANs and specify the appropriate VLAN number. >This was so much simpler with Cisco devices! No. It is exactly the same.
... View more