AutoVPN + external VPN

[timmyver]

Hey, 

we have a setup with a VMX in the cloud which servers as a Hub for our Remote Site(Spokes). So it's Hub and spoke setup with different site.

Now for a new site we want to have a VLAN from site 1 connected to a VLAN in Site 2 directly without connecting it out Hub and Spoke. So that those VLAN's are separated from our Environment.

From the gui it doesn't look possible, does anybody have a idea.

For the routing we use BGP to our Virtual Wan in Azure so we don't want the route injected to our Global Virtual WAN.

[ww]

The closest you get would be making  one of that locations also a hub. And connect the one spoke location also to that (new) 2nd hub.  Then the spoke  would connect directly to the advertised vlans on that 2nd hub

[GreenMan]

Bear in mind that, if you want to limit access to those destinations, however you interconnect them (either by making one a Hub, the other a connected Spoke - or make them both Hubs) you will absolutely need to use VPN firewall rules to deny all VPN-routed subnets from accessing the target subnets, except the very specific ones you need to work:   https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#VPN_Firewall_Rules   https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#VPN_Firewall_Rules

[timmyver]

Hey we could do it with deny rules but even then the route is injected in our routing Table and advertised through our whole VWAN and we want to avoid that.