Why don't you create a separate VLAN for this SSID, when you use NAT the client connection will use the AP IP to access the network. In my opinion, the best option is to use a different VLAN for this case. https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/VLAN_Tagging_on_MR_Access_Points
... View more