SSID Device Type Group Policies Configuration

Version:

Dashboard Location: Wireless > Configure > SSIDs > Access Control

Wireless Device Type Policy Management

SSID device type group policies configuration in Meraki wireless networks provides administrators with comprehensive device-based access control, enabling automatic policy assignment based on device type detection, network access restriction by device category, bandwidth allocation per device type, and security policy enforcement based on device characteristics. This functionality supports BYOD policy management, IoT device control, corporate device prioritization, and network security segmentation based on device fingerprinting and classification. Device type group policies are essential for implementing zero-trust network access, managing heterogeneous device environments, enforcing corporate security standards, and maintaining network performance across diverse device ecosystems.

Diagram

Classes

ssids (meraki.domains.organizations.networks.wireless)

Name	Type	Constraint	Mandatory	Default Value
device_type_group_policies	Class	`[device_type_group_policies]`	No

device_type_group_policies (meraki.domains.organizations.networks.wireless.ssids)

Name	Type	Constraint	Mandatory	Default Value
enabled	Boolean	`true`, `false`	No
device_type_policies	List	`[device_type_policies]`	No

device_type_policies (meraki.domains.organizations.networks.wireless.ssids.device_type_group_policies)

Name	Type	Constraint	Mandatory
device_type	Choice	`Android`, `B&N Nook`, `BlackBerry`, `Chrome OS`, `Mac OS X`, `Other OS`, `Windows`, `Windows Phone`, `iPad`, `iPhone`, `iPod`	Yes
device_policy	Choice	`Allowed`, `Blocked`, `Group policy`	Yes
group_policy_name	String	min: `1`, max: `127`	No

Examples

Example-1: The example below demonstrates SSID device type group policies configuration.

The CORP SSID (SSID 0) has device type group policies disabled, so no automatic policy assignment or device-based access control is enforced. However, the configuration structure allows for future policy definitions based on device categories, such as mobile devices, laptops, or IoT devices, to enable differentiated access and resource allocation if needed.

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          networks:
            - name: !env network_name
              product_types:
                - appliance
                - switch
                - wireless
                - camera
                - sensor
                - cellularGateway
              wireless:
                ssids:
                  - name: CORP
                    ssid_number: "0"
                    device_type_group_policies:
                      enabled: false