802.11r is also not available while using NAT mode or Layer 3 roaming. ... View more

15 meters is pretty close to the edge of a typical cell edge in an office environment where MR33 would propagate it signal in a donut shape.  That may be your issue, particularly for VoIP.  One possible issues you can address:   - APs at the ceiling level can see each other pretty hot and reduce TX power to adjust what it thinks is high-density deployment;  however, client devices at the floor levels are too far to use lower TX power levels;  try adjusting the minimum TX power in the Radio profiles to be no less than 14dBm (the typical max supported by smartphones)   If it doesn't resolve or improve your issue, I'd revisit proper coverage via an RF validation ... View more

You cannot configure a non-Meraki switch thru the dashboard. You would have to configure that the traditional way (cli, etc).  the obvious advantage of all-Meraki stack is that you’d get complete visibility thru the dashboard.  ... View more

If you are asking whether Meraki switches (MS) are required for Meraki AP (MR) to work, the short answer is No.    But you do need to have a source of POE, which can either be Cisco Catalyst or Meraki MS.  You should pick a switch that supports 802.11at ... View more

1 - map each SSID to a unique VLAN / subnet https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/VLAN_Tagging_on_MR_Access_Points   2 - use flow preference to select which source goes to which wan https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences   3 - don’t forget to make sure guest SSID users cannot communicate with each other.  https://community.meraki.com/t5/Wireless-LAN/LAN-isolation/td-p/59075   ... View more

I believe this link will help https://documentation.meraki.com/MR/Other_Topics/Cisco_Meraki_and_Umbrella_Integration_-_MR_Advanced%2F%2FUpgrade_License  ... View more

Also, is it possible that the client device is using randomized MAC addresses? https://community.cisco.com/t5/security-documents/random-mac-address-how-to-deal-with-it-using-ise/ta-p/4049321    ... View more

Sorry to hear it’s not working.  What are you seeing on ISE logs?  Those are usually very useful in cases like these.  ... View more

Sounds to me like Data-Carrier-Detect might be enabled? If the client disconnects before roaming to other APs, it’s not technically seamless-roaming.    Besides that, I’m sure you’ve already checked the primary details: https://community.cisco.com/t5/security-documents/how-to-integrate-meraki-networks-with-ise/ta-p/3618650  - are Both APs are on the same network and tags (ie same SSID) - splash authentication depends on whether splash is hosted on Meraki cloud or on ISE; if Meraki cloud, use “Sign on” with My Radius. if using ISE with MAB authentication, then splash must be configured as ISE (vs my RADIUS)     ... View more

Your SSID configuration sounds right.  Perhaps the trunk port to the AP is not allowing your SSID vlan? ... View more