I have this exact issue and it's driving me mad as we're trying to push software remotely and updates etc and most fail due to incorrect hostname or network error etc presumably because it cannnot decipher which IP is correct...   Did you ever get to the bottom of it?  ... View more

You have to go to Firewall & traffic shaping for the specific SSID you want and Enable Umbrella protection there. This requires version 26.x on the APs to work.   More info here. https://documentation.meraki.com/MR/Other_Topics/Manually_Integrating_Cisco_Umbrella_with_Meraki_Networks   If you do not want to do that, other workaround is adding Umbrella DNS to your DHCP scope and using Firewall rules to block access to other DNS servers. ... View more

'ideal' is dependent on the design. It's perfectly viable if your only ever going to have a single SSID with a single VLAN. I personally prefer to always have my AP's connecting to a TRUNK port, and then choosing which VLAN's to allow across it for pruning and this also gives me the ability to create new SSID's on different VLANs, allowing for growth and more flexibility on what you can do. ... View more

PhilipDAth,  thank you.   Throughout reading all of these articles it seems that was the one concept that I never grasped.   Thanks again.     ... View more