If you have access to CMAK i'd suggest using that to build your client VPN.  It's been a while since I used CMAK and set ours up, but after configuring with CMAK you'll get a VPN client exe.  Then you can just double click on it to install on machines, or roll it out however you prefer.  Yes it's old, but still works great.  We are using Radius L2TP/IPSEC with our MX for the windows client VPN.  Here's more info on it: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc752995(v=ws.11)?redirectedfrom=MSDN ... View more

@ww wrote: Yes. If  both  exist you can combine  them.   If you add new gear to a "wireless  only"  it gets a combined  network  to.   https://documentation.meraki.com/zGeneral_Administration/Organizations_and_Networks/Combined_Dashboard_Networks And if you ever need to rearrange wireless/switch/appliance networks once you have a combined network, you can split it out then recombine. ... View more