
Tagging for Administrative Privileges – Building the Dashboard
Network tagging can be used to easily help scope administrative permissions (discussed in the previous section) within the Dashboard across networks. Through the use of network tags, you can easily group networks and then use those groupings to assign administrative permissions to multiple administrators without requiring each individual network be specified for each administrator.
By tagging multiple networks with the same network tag, the option to assign administrative permission targets based on the network tag becomes available, as shown in Figure 2-7. This provides a quick method to easily assign permissions across multiple administrator accounts to groups of networks and allow those groups to be updated and modified as needed by simply adding or removing the appropriate network tag.
Figure 2-7 An Administrator Account Configured with Different Permissions for Different Network Groups Based on the Applied Network Tag
Network and Device Configurations
Similar to tagging for administrative purposes, you can manage certain Dashboard configurations through the use of device and network tags. Two of the most prominent uses of tagging for configuration management in the Dashboard are configuring SSID availability on MR access points and configuring non-Meraki VPN peer availability for MX and Z series devices.
Configuring SSID Availability on MR Access Points
By default, all access points (APs) in the same Dashboard network broadcast all enabled SSIDs. However, you can change the default behavior by configuring availability on the Wireless > SSID Availability page, shown in Figure 2-8. Enabling the Per-AP Availability option on a given SSID allows you to select from a list of currently applied device tags on access points within that network to selectively enable the chosen SSID to be broadcast from only access points that have the selected tag applied. Once configured, this provides an easy way to scope SSID availability for multiple SSIDs across multiple access points by simply adding or removing the matching tag for an SSID to/from any access point.
Figure 2-8 An SSID Configured to Broadcast Only from APs That Have the LAB Tag Applied in the Dashboard
Pro Tip
Leverage a tag-based strategy to reduce the number of SSIDs an AP has to advertise, thereby reducing potential noise and interference.