I would agree with rburch.  Typically each physical location will be in their own network.  Switches, APs, cameras at a single site will all be in the same network.  The exception to this are the MX firewalls.  If you are running layer 3 switches in an environment, the client tracking section of the Addressing and VLANs of the MX, will need to be set to "ip address - Use if there is a non-Meraki layer 3 device routing downstream end clients.".  Even though it says "non-Meraki" I still set this to track by IP even if it is using a Meraki layer 3 switch per https://documentation.meraki.com/MX/Monitoring_and_Reporting/Client_Tracking_Options.   The reasoning for this is at a layer 3 hop, a layer 3 device will change the source mac address to that of itself.  If you're tracking by mac address, then all you'll see is traffic coming/going to your switch.     Once you change the tracking to be by IP address, it requires you to put the MX in its own network. ... View more