Auto VPN Hub and Spoke Summerization... is it possible?

[ToryDav]

Hello,

Is it possible to summarize branch routes with AutoVPN?

Let's suppose my branch site VLANS are all /24s that could be summarized into a single larger prefix.

When I turn on AutoVPN and configure the branch as a spoke, all the enabled /24s propagate to the hub MX or vMXs.

So is it not possible to summarize these routes?

Let's say the hubs are vMXs that peer eBGP with another device. The vMX passes the specific prefixes to that device. 

Any thoughts? 

[alemabrahao]

The answer is not, just static routes.

[cmr]

You can do it by changing the topology.  At most sites we have one network with all the switches, wireless accesspoints, cameras etc. in and then use a transit VLAN to connect to the MXs that are in a different Meraki dashboard network. On the MX network we add a static route saying that the summarised subnet (a /16) is available via the other end of the transit VLAN.  That way the Auto VPN tables are cleaner and adding and removing subnets on the LAN doesn't lead to any rebuilds of the WAN tables.

[ToryDav]

Genius! Okay so let me ask you this, the VLAN Gateways live on a layer 3 switch then? 

[cmr]

Yes, the plus is performance, the minus is no stateful firewall rules.  There is a compromise to be had...