You will have "Allow clients to access the LAN" set to Deny in the Wireless - Firewall & Traffic Shaping section for that SSID. ... View more

Absolutely no reason why this shouldn’t work. As @ww states, best check the PoE requirements of the APs and what the switch can provide.   we have Meraki MRs working on Dell, HP, Cisco with no issues. ... View more

I strongly agree with @KarstenI on all edge switches having POE. The cost difference is not worth the risk of putting in a device without it and having to replace it.  ... View more

The configuration on the switch (between the switch and the access point) depends on what IP addressing you are using for the SSID. If you are doing any VLAN tagging for the SSID then you will need a trunk between the AP and the switch. If not, then you just need the management VLAN on the link to the access point. The configuration on the RADIUS server depends on the product you’re using. Fundamentally you’ll need to configure the NAS/NAD (i.e the access point) that the RADIUS requests are going to come from - either the specific management IP address of the access point, or the entire management subnet - the secret you configured for RADIUS server in the Meraki Dashboard, and the MAC addresses. Depending on the sever you may have to configure a password for the MAC address, and this will just be the MAC address again. There are likely some rules needing configuring too, but these are server dependent. Have a look in the documentation, they normally have some basic examples to get you started. ... View more

Best is to upload the floorplans and place the AP's to the right location on the floorplan.   https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Using_a_Floor_Plan_or_Custom_Map_in_Dashboard   Placing devices on the floorplans: https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Placing_Devices_on_the_Map_in_Dashboard     In Dashboard under Wireless => Heatmaps you will have this way the best results. rgds orger ... View more

@Bruce  Thanks    What is not using MX. I will use Cisco ISR router with Provider. ... View more

Hi @Naresh_Bhardwaj , what firmware are the APs on? We’ve seen similar behaviour in the past which was resolved by a firmware upgrade. ... View more

you can use the AP to capture traffic on it's wired port to see if there are DHCP requests going out and responses to it's DHCP request.   i tis under network wide /monitor / packet capture     ... View more

When I configure APs, I make sure the switch port the AP is connected to is configured for access mode, on a VLAN that has DHCP, and has access to the internet.  I usually use a vlan configured for user desktop PCs.   ... View more

turning off meshing looks like a system wide option.  if you only wanted the units to not mesh while working on them, you could change the RF channels to ones that are not in use by the local AP ... View more

Keep in mind, a Meraki AP that is a mesh repeater must be DHCP addressed ... View more

The MR36 is is it in bridge mode? The "Vlan Tagging" box is set in "Use Vlan Tagging"?   Example:     ... View more

Start more basic....   Are you at the same location as the AP? Verify firstly that the AP has power. Then verify the status of the LED on the AP what is it doing? If the AP  does not have have Internet connectivity,  it will broadcast a survival SSID.   If a Meraki Access Point does not have a configuration from the Meraki Cloud Controller it will instead broadcast a default SSID of "Meraki-Scanning." The AP takes an address of 10.128.128.128, the SSID runs DHCP, and it will try to assign any clients that associate with it an address. This is merely to provide a connection between a client and the AP to allow for local configuration.   You can associate to this SSID and see the local status page which will tell you where the device failing. ... View more

Using regular dual band means the AP will broadcast beacons on both bands and will respond with probe responses to probe requests coming from their respective band.  So the client can choose which band it will join the AP.   Dual band with bandsteering adds a little intelligence to the AP.  The AP will detect if a client has sent a probe request on the 5 GHz band.  If the client would after that send a probe request on the 2.4 GHz band the AP will not answer it causing the Wi-Fi client to think the SSID is only available on the 5 GHz band and join it.   If your environment has all modern laptops and modern smartphones you'll be likely to have success using the bandsteering function.  However when running AP's for IoT devices you could have a certain device that will have trouble finding the SSID and thus failing connection.   So my 2 cents: depending on your environment you may try to use the bandsteering but if you see some devices that are important failing because of it, move back to regular dual band.  You also have the ability to change this option per RF profile and thus per AP.  So if you have an office area and a warehouse/production area you could keep the bandsteering only in the office area. ... View more

Always use combined. ... View more

The General - Public IP is the IP address that the Meraki cloud sees the management traffic coming from for that device. Whereas the WAN 1 IP address is the IP address that is actually assigned to the interface - in the example it’s dynamically assigned so probably provided from the ISP from a private address pool. Since they are different I would suggest that someone or something is doing a NAT on your link (if it’s a ‘direct’ internet link, then I’d suggest it’s the ISP). ... View more

@Naresh_Bhardwaj can the wireless users contact anything in the wired VLAN, or is the problem only limited to printer communication? ... View more

As @CptnCrnch and @DarrenOC said, this should all work fine. I’ve had a good number of customers who run just MRs with Cisco Catalyst switches, and various firewall vendors.   The main thing I’ve found that you can’t do with a MR alone is something akin to a guest anchor. You can configure a guest VLAN easily and use that, but if you’re looking for something like a Cisco guest anchor setup where traffic is tunnelled to a DMZ then you’ll need an MX (in the DMZ) to achieve this.   Personal opinion is that in most cases tunnelling guest traffic is overkill and not required, so you don’t need the MX. But I have had customers who require that extra level of separation between their corporate and guest networks. ... View more

@Naresh_Bhardwaj exactly, the firewall maintains a Network Address Translation table so that it knows what internal IP matches up to each conversation so that the correct AP gets the reply to the contact with the dashboard. ... View more

You cannot configure a non-Meraki switch thru the dashboard. You would have to configure that the traditional way (cli, etc).  the obvious advantage of all-Meraki stack is that you’d get complete visibility thru the dashboard.  ... View more