Yes this is the correct solution.  You can see why here:  - in NAT mode clients cannot communicate with each other:   Note I just set up a separate SSID for the clients that require this to avoid compromising rest of network.   NAT mode: Use Meraki DHCP Clients receive IP addresses in an isolated 10.0.0.0/8 network. Clients cannot communicate with each other, but they may communicate with devices on the wired LAN if the SSID firewall settings permit.  Bridge mode: Make clients part of the LAN Meraki devices operate transparently (no NAT or DHCP). Clients receive DHCP leases from the LAN or use static IPs. Use this for shared printers, file sharing, and wireless cameras. ... View more