Just wanted to add my 2 cents in since I run the network for a school district currently.   If you don't need devices on the public Wi-fi to access any file servers or printers, then you can simplify and get rid of VLAN 699.  The MR access points allow you to differentiate Client IP assignment by SSID.  My public SSID uses Meraki DHCP and my private SSID uses Local LAN DHCP.  It's allowed me to simplify the VLANs while maintaining security, and that's always a great goal to have- simple and secure. ... View more