AUTO-VPN and static routes

[pbarbieri]

Good morning, I have a network with several meraki MX64. I have enabled autovpn hub and spoke configuration between the nodes, with one hub and three spokes. in one meraki node one of these subnet (10.11.8.x/24) that take part to the auto-VPN tunnels have two static routes with subnet 10.11.3x/24 and 10.11.2.x/24 and 10.11.8.1 as gateway . I have configured the static routing enabling the VPN options for the subnet 10.11.3.x/24 and 10.11.2.x/24. My question is : if I have already enabled the VPN option for 10.11.8.x Do I have to set the VPN option also for the subnet 10.11.3x/24 and 10.11.2.x/24 that have a static routing with 10..11.8.1? What does It happen if I don't apply this option? Static routing Subnet Gateway 10.11.3.0/24 10.11.8.1 10.11.2.0/24 10.11.8.1 10.11.8.0/24 VPN enabled Thanks

[BrechtSchamp · Accepted solution]

Yes, enabling VPN for those subnets too, will make sure that the static routes via 8.1 are also distributed to the VPN peers. Keep in mind that you'll need to setup return routes in those subnets too. Otherwise the responses to packets can't be delivered.

[pbarbieri]

Many thanks!