NAT mode vMX with static routes

[GIdenJoe]

Hey all,

I'm looking at different documents but especially the use cases and FAQ for the routed mode vMX deployment.

https://documentation.meraki.com/MX/Other_Topics/vMX_NAT_Mode_Use_Cases_and_FAQ

In this document I can't find anything about when you deploy NAT mode and you need to add routes to VM subnets what your next hop must be.  As a non cloud engineer this is extremely confusing and must be explained.

The concentrator mode was easy since you only have a default route on the WAN interface and just created the routes to send to your spokes but in NAT mode this is unclear.

[PhilipDAth]

I ran into this.  100% agree,

I went back to VPN concentrator mode.

[Mloraditch]

I agree they should add some clarification, but it's just the gateway on your LAN interface (first IP in the subnet in Azure), unless you have some other network appliance on the same subnet that you need to route to.

[GIdenJoe]

And you still add these via dashboard or is it in Azure that you need to add these routes to go to the routing table.

[Mloraditch]

Your MX needs routes to every subnet in Azure it needs to talk to and those subnets need routes back to the appliance. 

The second part is the same regardless of concentrator or nat mode.