Meraki Solutions Specialist study plan
Meraki Solutions Specialist · Give each week a clear focus.
8 weeks · About 7 hours per week
Cloud-Managed Networking Architecture and the Meraki Dashboard
Describe how the Meraki cloud architecture separates management plane (dashboard/cloud) from data plane (device traffic and tunnels)
Map the organization → network → device → configuration hierarchy and explain which settings inherit versus override
Create a demo organization and multiple networks, then configure organization-wide settings including admin roles and authentication
Explain how configuration changes are staged, validated, and pushed from cloud to devices, including the local status page role
Distinguish Meraki-hosted cloud services (Auto VPN registration, dashboard, firmware delivery) from traffic that never leaves the local network
Your checkpoint
A one-page architecture diagram plus a written explanation of the org/network/device hierarchy and which settings are inherited at each level, validated against a live demo organization you built.
Cloud-Managed Networking Architecture and the Meraki Dashboard & Device Deployment, Provisioning, and Configuration
Claim/add devices into an organization's inventory and assign them to the correct network
Configure network-wide Layer 3 settings: VLANs, subnets, DHCP, and static routes
Build a configuration template and bind networks to it, then verify what is and is not templated
Describe device onboarding flows: zero-touch provisioning, local status page addressing, and firmware upgrade windows
Compare configuration approaches for a single small site versus a multi-site templated deployment
Your checkpoint
A working two-site demo deployment where each site network is bound to a shared template with at least three VLANs and verified inherited settings.
Device Deployment, Provisioning, and Configuration
Configure MX site-to-site VPN between two networks and verify tunnel status and subnet advertisement
Configure switch port profiles and apply them consistently across multiple access switches
Configure wireless SSIDs with the correct VLAN tagging, authentication mode, and band/radio settings
Differentiate concentrator mode, spoke mode, and hub-and-spoke topologies and select the right one for a scenario
Document the order of operations for bringing a new branch online end to end
Your checkpoint
A step-by-step branch deployment runbook covering device claim, template binding, VLANs, VPN, switching, and wireless, executed against your demo network with screenshots replaced by written verification notes.
Network Security, Access Control, and Policy
Write Layer 3 and Layer 7 firewall rules in the correct evaluation order and predict the resulting allow/deny outcome for sample flows
Configure content filtering policies and apply them per-network and per-client group policy
Configure intrusion detection/prevention and malware protection settings and explain what each mode does to traffic
Set up client authentication using a splash page and 802.1X with a RADIUS server profile
Explain how group policies override network-wide policy for a specific client or device
Your checkpoint
A security policy document for the demo network listing every firewall rule, content filter, and group policy with the reasoning for its order and scope, plus the predicted outcome for ten sample traffic flows.
Network Security, Access Control, and Policy & Monitoring, Troubleshooting, and Reporting
Configure traffic shaping rules and bandwidth limits and confirm their effect on client throughput
Configure site-to-site and client VPN access controls, including authentication and split vs full tunnel behavior
Interpret firewall, security, and configuration-change events in the dashboard event log
Trace a blocked flow from client through switch and MX to identify which rule or policy matched
Distinguish IDS versus IPS alerting behavior using simulated traffic and the security center reporting
Your checkpoint
An incident-style writeup that takes three blocked or alerted flows from symptom to root-cause rule, each citing the specific event log entries and policy causing the outcome.
Monitoring, Troubleshooting, and Reporting
Run dashboard troubleshooting tools: ping, traceroute, packet capture, and throughput/latency tests from an MX and a switch
Analyze wireless health metrics including client connectivity, channel utilization, and roaming behavior
Interpret uplink status, WAN failover events, and device health/loss-and-latency indicators
Build and schedule a summary report covering utilization, security events, and device availability
Diagnose a simulated client connectivity failure using a structured layer-by-layer method
Your checkpoint
A troubleshooting case study of one simulated outage or degradation, including the tools used, evidence collected, root cause, and remediation verified after the fix.
Automation, Integration, and API Usage
Generate an API key, identify organization and network IDs, and authenticate requests correctly
Perform read and write operations against the Dashboard API for networks, devices, and clients
Automate a recurring task such as bulk SSID or VLAN updates using a script
Configure outbound webhooks or alerts to an external receiver and validate payload delivery
Describe how integration options differ: API polling versus webhooks versus syslog/flow export
Your checkpoint
A working script that reads organization and network inventory, applies a bulk configuration change to at least two networks, and logs the before/after state.
Cloud-Managed Networking Architecture and the Meraki Dashboard & Device Deployment, Provisioning, and Configuration & Network Security, Access Control, and Policy & Monitoring, Troubleshooting, and Reporting & Automation, Integration, and API Usage
Re-derive the architecture and hierarchy model from memory and correct any gaps found in week 1 notes
Re-run the branch deployment runbook without notes to test recall of provisioning order
Re-answer missed practice items from every domain and write a one-line reason for each corrected answer
Consolidate the security policy, troubleshooting case study, and script into a single reference portfolio
Take a timed full-length practice set and review every incorrect item by domain
Your checkpoint
A consolidated portfolio of the eight weekly deliverables plus a scored timed practice attempt with a per-domain weakness list and remediation notes.
Milestones
Week 2: You can explain the cloud architecture and org/network/device hierarchy without notes, and your two-site templated deployment shows correct inherited VLAN and DHCP settings on both networks.
Week 4: You can predict allow/deny for arbitrary firewall and content-filtering flows and correctly order rules; the security policy document covers all ten sample flows with no unexplained outcomes.
Week 6: You can diagnose a client connectivity failure using dashboard tools alone and produce supporting event log evidence; troubleshooting case study and scheduled report are both complete.
Week 8: Timed practice attempt scored with a per-domain breakdown, every domain at or above your target threshold, and all eight weekly deliverables present in the portfolio.