Cisco Meraki SD-WAN Traffic design

[Linus_S]

Hi Folks,

We want to design the SD-WAN in Hub-Spoke mode.

1. For traffic between Hubs, VLAN1 some traffic forwarded to the Internet from Local WAN(e.g. , Microsoft 365 traffic).

But VLAN1, some traffic needs to be forwarded to other Hub A sites(e.g., Youtube traffic).

2. For traffic between Hub and Spoke, VLAN 1 some traffic from the Spoke site needs to be forwarded to the Internet from the Local WAN(e.g., Microsoft 365 traffic).

But VLAN1 some traffic needs to be forwarded to the Hub A MX site(e.g., Youtube traffic), and VLAN1 some traffic needs to be forwarded to The Hub B site(e.g., Github traffic).

This requirement can be met in Cisco Viptela SD-WAN, but how can it be configured and implemented in Meraki?

[PhilipDAth]

You create a VPN Full tunnel exclusions.

https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Configuration_Guides/Site-t...

More specifically, you want to use the Smart Breakout.

https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Configuration_Guides/Site-t...

Note that this needs the "SD-WAN+" licence.

[Linus_S]

Hi Philip,

Thanks for your quick reply.

After checking the document.

The solution shared in this document cannot fully meet our needs.

This is because it relies on setting other sites as exit points and excluding certain applications.

For Hub nodes, setting the exit point to another Hub will cause all applications not excluded to be forwarded through the Tunnel.

We only want to send a small portion of traffic from specific applications through the Tunnel to other Hubs.