Hi,   Thanks for your response. I have the VLAN created on the MX now with an MX IP of 10.4.2.10. I can ping this interface from the MS and other devices, however, I can't communicate with anything else on the 10.4.2.0 network. This I could do with the Layer 3 interface on the switch - proving that it is an issue on the Meraki and not the connectivity behind it. I can see clients on the 10.4.2.0 network and there is a MAC table built up, not sure why it isn't routing this traffic properly? ... View more

I have tried this with the layer 3 interface on the switch, this interface can then communicate with the 10.4.2.0 network as expected but the AP’s and other devices can’t route to this network/don’t get a ping response. I’m guessing this is because there’s no route on the MX, which is where all of our VLAN’s and gateways are based. I have tried having a L3 interface on the switch, having a routed VLAN on the MX as well as a combination of both, I still can’t get this to work. With this created on the MX in the ‘addressing and VLANs’ section, I don’t get any connectivity with 10.4.2.0 at all.   I have also tried adding static routes, this gives me an error telling me that it can't be contained within an existing VLAN (when on the MX). When the interface is on the MS and not the MX I can't add a static route as it doesn't know the network. Should the L3 interface be on the MX or on the MS? ... View more

Thank you very much for your help. I will combine the ideas that have been provided here to overhaul our wireless network/s. ... View more

Hi, Thank you for your detailed assistance. With your 'ACS-BYOD' SSID, what association requiremens and splash page do you have set? The AD group membership is something that we want to use to assigne executives a different policy to the other staff. Can this be used with WPA2-Enterprise, or are you using this with an Open network and splash page. Many thanks ... View more

I've looked into this but am I right in saying this would make Meraki group policy assignment by user groups on AD impossible? This was an important feature for us that I know is available to use with the splash page. Is is possible to implement this with WPA2-Enterprise? Thanks ... View more

That would be the ideal option and is the most seamless way of connecting. The difficulty in this is that the Meraki is a non-corporate Wi-Fi solution so am a bit limited as to what it can access. I will look into seeing if this could be possible. Thanks for your help ... View more

Hi Philip, Unfortunately, setting up a RADIUS server that communicates with AD is not an option, so we would have to use the LDAP method through a splash page. Many thanks, Jake ... View more

Hi Philip,   Unfortunately, setting up a RADIUS server that communicates with AD is not an option, so we would have to use the LDAP method through a splash page.   Many thanks, Jake ... View more