Need of multiple VLAN throught non-meraki VPN


Need of multiple VLAN throught non-meraki VPN

Hello again,


It seems that it is not possible to have multiple VLAN thrgh a non meraki VPN peer.

Am I right or there's a specific configuration to use ?

Kind of a big deal
Kind of a big deal

It is possible!
You can have some instability if you have a certain vendor combination and alot of traffic selectors but it should work.

Just include the VLANs or static routes on your MX in the VPN.
And then add all the remote VLANs in the little box in the config and it should make child SA's for each traffic selector.

Kind of a big deal

Do keep in mind that any third party peer will need to include ALL of your subnets that participate in VPNs, in their "interesting traffic". You can restrict what they get access to via your site-to-site outbound firewall.

Building a reputation

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.