Wireless Alternate Management Interface Configuration

Dashboard Location: Network-wide > Configure > General > Alternate Management Interface

Wireless Management Network Isolation

Wireless alternate management interface configuration in Meraki networks provides administrators with comprehensive out-of-band management capabilities for wireless access points, enabling management traffic isolation, dedicated management VLAN assignment, protocol-specific routing, and enhanced network security. This functionality supports network segmentation, management traffic separation, administrative access control, and security boundary enforcement. Alternate management interfaces are essential for creating secure management networks, isolating administrative traffic, implementing network access policies, and ensuring reliable management connectivity in enterprise wireless deployments.

Diagram

Classes

meraki

Name	Type	Constraint	Mandatory	Default Value
domains	List	domains	No

domains (meraki)

Name	Type	Constraint	Mandatory	Default Value
organizations	List	organizations	Yes

organizations (meraki.domains)

Name	Type	Constraint	Mandatory	Default Value
networks	List	networks	No

networks (meraki.domains.organizations)

Name	Type	Constraint	Mandatory	Default Value
wireless	Class	wireless	No

wireless (meraki.domains.organizations.networks)

Name	Type	Constraint	Mandatory	Default Value
alternate_management_interface	Class	alternate_management_interface	No

alternate_management_interface (meraki.domains.organizations.networks.wireless)

Name	Type	Constraint	Mandatory	Default Value
enabled	Boolean	true, false	No
vlan_id	Any	Integer[min: 1, max: 4094] or String[matches: `(?:[1-9]	[1-9][0-9]	[1-9][0-9]2
protocols	List	Choice[ldap, radius, snmp, syslog]	No
access_points	List	access_points	No

access_points (meraki.domains.organizations.networks.wireless.alternate_management_interface)

Name	Type	Constraint	Mandatory	Default Value
alternate_management_ip	IP		Yes
subnet_mask	String	Regex: ^(255|254|252|248|240|224|192|128|0+)(\.0|\.128|\.192|\.224|\.240|\.248|\.252|\.254|\.255){0,3}$	No
gateway	IP		No
dns1	IP		No
dns2	IP		No
device	String	min: 1, max: 127	Yes

Examples

Example-1: The example below demonstrates wireless alternate management interface configuration.

This configuration isolates wireless management traffic by designating a specific VLAN for network management protocols. The example includes protocol selection and VLAN assignment for enhanced security and operational isolation of wireless infrastructure management.

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          networks:
            - name: !env network_name
              product_types:
                - appliance
                - switch
                - wireless
                - camera
                - sensor
                - cellularGateway
              wireless:
                alternate_management_interface:
                  enabled: true
                  vlan_id: 100
                  protocols:
                    - ldap
                    - radius
                    - snmp
                    - syslog
                  access_points:
                    - device: !env ap_01
                      alternate_management_ip: 1.1.1.1
                      subnet_mask: 255.255.255.0
                      gateway: 1.1.1.254
                      dns1: 8.8.8.8