Appliance SSIDs Configuration

Dashboard Location: Security & SD-WAN > Configure > Wireless settings > SSIDs

Appliance SSID Management

Appliance SSID configuration in Meraki networks defines the wireless networks broadcast by MX security appliances with integrated wireless radios. This functionality supports up to four SSIDs per appliance, with options for VLAN tagging, multiple authentication modes (open, PSK, 802.1X with Meraki or external RADIUS), encryption selection (WEP, WPA), WPA encryption modes (WPA1/WPA2/WPA3 variants), 802.11w management frame protection, SSID visibility, and DHCP-enforced deauthentication. Appliance SSIDs are essential for small office and branch deployments that rely on the integrated wireless radio of the security appliance rather than dedicated access points.

Diagram

Classes

meraki

Name	Type	Constraint	Mandatory	Default Value
domains	List	domains	No

domains (meraki)

Name	Type	Constraint	Mandatory	Default Value
organizations	List	organizations	Yes

organizations (meraki.domains)

Name	Type	Constraint	Mandatory	Default Value
networks	List	networks	No

networks (meraki.domains.organizations)

Name	Type	Constraint	Mandatory	Default Value
appliance	Class	appliance	No

appliance (meraki.domains.organizations.networks)

Name	Type	Constraint	Mandatory	Default Value
ssids	List	ssids	No

ssids (meraki.domains.organizations.networks.appliance)

Name	Type	Constraint	Mandatory	Default Value
name	String	min: 1, max: 127	No
number	Choice	1, 2, 3, 4	No
enabled	Boolean	true, false	No
default_vlan_id	Any	Integer[min: 1, max: 4094] or String[matches: `(?:[1-9]	[1-9][0-9]	[1-9][0-9]2
auth_mode	Choice	8021x-meraki, 8021x-radius, open, psk	No
psk	String	min: 1, max: 64	No
radius_servers	List	radius_servers	No
encryption_mode	Choice	wep, wpa	No
wpa_encryption_mode	Choice	WPA1 and WPA2, WPA2 only, WPA3 Transition Mode, WPA3 only	No
visible	Boolean	true, false	No
dhcp_enforced_deauthentication	Boolean	true, false	No
dot11w	Class	dot11w	No

radius_servers (meraki.domains.organizations.networks.appliance.ssids)

Name	Type	Constraint	Mandatory	Default Value
host	String	min: 1, max: 127	No
port	Integer	min: 0, max: 65535	No
secret	String	min: 1, max: 127	No

dot11w (meraki.domains.organizations.networks.appliance.ssids)

Name	Type	Constraint	Mandatory	Default Value
enabled	Boolean	true, false	No
required	Boolean	true, false	No

Examples

Example-1: The example below demonstrates appliance SSID configuration.

This example configures two SSIDs on the appliance: a “Corp” SSID using WPA2-only encryption with 802.1X authentication via external RADIUS servers, mapped to VLAN 10 and protected with optional 802.11w; and a hidden “Guest” SSID using WPA2 PSK authentication, mapped to VLAN 20.

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          networks:
            - name: !env network_name
              product_types:
                - appliance
              appliance:
                ssids:
                  - number: 1
                    name: Corp
                    enabled: true
                    default_vlan_id: 10
                    auth_mode: 8021x-radius
                    encryption_mode: wpa
                    wpa_encryption_mode: WPA2 only
                    visible: true
                    dot11w:
                      enabled: true
                      required: false
                    radius_servers:
                      - host: !env radius_server_ip
                        port: 1812
                        secret: !env radius_secret
                    dhcp_enforced_deauthentication:
                      enabled: false
                  - number: 2
                    name: Guest
                    enabled: true
                    default_vlan_id: 20
                    auth_mode: psk
                    psk: !env guest_psk
                    encryption_mode: wpa
                    wpa_encryption_mode: WPA2 only
                    visible: false