SSID tunneling within corporate network - vlan tagging

[RobHuijser]

Hi,

We need to adjust our design just like using Cisco classic with Wireless LAN controller.

To do so, the SDWAN appliance needs to convert to VPN concentrator and a lot of options are disappeared.

In the configuration of the SSID you select [VPN: tunnel data to a concentrator] with VLAN tagging: 100 (example)

All set and done.... but

The SDWAN appliance has only the WAN1 and WAN2 selectable which cannot be convertor to a trunk.

Where can I find my vlan tagging 100 on the SDWAN appliance (breakout to the local network)

[ww]

I did not test this. But it should work using the wan1 Port https://community.meraki.com/t5/Security-SD-WAN/VLAN-Config-on-Singled-Armed-concetrator-for-SSID-Tu...

[RobHuijser · Accepted solution]

Thanks for the link....

So it seems that all configured VLAN's on the SSID are breakout via the WAN interface. Cool!

You don't need to set anything on the MX at all for this as it's just layer 2 for whichever VLANs you specify in the SSID config. Just make sure that the appropriate VLANs are trunked to the WAN interface of the MX and it should work.