You can absolutely have one AP that has two SSIDs, one in NAT mode and one in bridge mode.   The NAT mode SSID uses the native VLAN on the trunk port on the switch that the AP connects to.  So configure this on your switch.   Follow this guide to configure per-ssid VLAN tagging. https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/VLAN_Tagging_on_MR_Access_Points ... View more