If you are creating a guest network, and by that you mean a network that does not allow access to the local network isolates guest users from each other then it does not have to extend across all sites. If fact that just adds extra complications. The guest network at each site/location can require the same user credentials across all the sites. Isolated guest network creation - Go to Wireless > SSIDs If the SSID you wish to use for guests does not exist, set it up, or edit the settings for that SSID. Then on the Access Control page set up the environment Under the section headed - Addressing and traffic you will see Client IP assignment - this gives you the option to select - NAT mode: Use Meraki DHCP Clients receive IP addresses in an isolated 10.0.0.0/8 network. Clients cannot communicate with each other, but they may communicate with devices on the wired LAN if the SSID firewall settings permit. Then ensure that guest users never access the local network. Usually I apply a group policy that stops guests running peer-to-peer applications (file sharing) and adjust the minimum network speed so that 802.11b is not supported as that severely restricts throughput.
... View more
