I work in IT for a small k12 school district where we have installed Meraki APs and switches and have been enjoying the ease of setup since I'm not a networking guru. My boss wants me to start securing the wifi (yes our district's single SSID is OPEN...) with one of our offices that has 12 people and then grow that to cover the entire district. We use gsuite, but have no directory services like RADIUS or Active Directory, and have a separate VLAN for each of the 5 buildings. Also, we are a Mac district with student Chromebooks. We are a small district so going with a big expensive enterprise solution will get shot down. And I need some evidence to prove that we need to go one way or another. He wants it to be as seamless as possible for the users and recommended MAC address filtering with their work devices, but I noticed that Meraki doesn't really have a simple MAC address filtering and I'm reading on forums that it's not that secure anyhow. I have toyed with the different authentication settings and got Meraki to enable Google authentication for 802.1x, but it requires a profile to be installed on all macOS and iOS devices first. I guess I'm looking for the perfect answer that probably doesn't exist. Does anybody have any experience with a setup like this? Thanks
... View more