2 different Gateway Tunnels for different purpose at same MX

[MauroJK]

We currently aim for the following layout:

• The SDWAN Gateway establishes HUB/Spoke SDWAN tunnels and routes only RFC1918 traffic through these tunnels.
• establishes a Non-Meraki peer tunnel with zScaler, which becomes the network gateway, and routes all internet traffic (0.0.0.0/0) through this tunnel.
• Additionally,  establishes another tunnel with Cloudify (zScaler), which also becomes the network gateway and routes all internet-bound traffic (0.0.0.0/0) through this tunnel, but only for the GUEST VLAN.
  
  

I am researching the MX and non-Meraki VPN peer documentation but cannot find a way to configure the MX in order to use Cloudify Tunnel as the gateway for traffic originating from the GUEST VLAN, while the zScaler Tunnel as the gateway for traffic originating from other VLANs.

[GIdenJoe]

Using non-Meraki VPN's to tunnel all traffic will most probably not work.  You need to define specific local and remote networks for this.

AutoVPN is a different beast.  If you set a default route on a spoke to a hub you can tunnel all local traffic over that for local networks that are subjected to the VPN tunnel.  In that case you would have to tunnel to a Meraki hub that then has a default route to the internet where you can allow or deny traffic using those other technologies.

[MauroJK]

Thanks for the Info GIJoe... there is a technical solution to setup this scenario with 2 internal segments with different default gateway?

[PhilipDAth]

This would be tremendously simpler if you used the Cisco solution - Umbrella (instead of Zscaler).  It has native integration.

Or step it up one more and go full SASE with Cisco Secure Connect.

https://meraki.cisco.com/products/cisco-plus-secure-connect/

[MauroJK]

Thanks for the Answer but the idea on a Tech Meraki Forum is to find technical solutions on Meraki Plattform. Not Pre-Sales other solutions. rigth? 

Regarding the scenario. 
besides of not being as easy as other vendors....
the question is... ITs Possible?

[PhilipDAth]

The reason why you are struggling with this is because of the current design.  If you can correct your system design, you'll have fewer issues.