Dashboard Throughput, AutoVPN, Default Route

[ksumann]

Hi everyone,

i'm just wondering how dashboard throughput works.

This is from the docs:

So for example if you have Auto VPN and a default route, the test just doesn't go through your Uplink, it goes to your Concentrator.
While the actual dashboard communication is always the uplink, ignoring routing settings.

So why does the test test something different?

[alemabrahao]

When you run a throughput test and have Auto VPN set up, the test traffic goes through your VPN concentrator. This checks how well your VPN connection is working.

The Meraki Dashboard always talks to your devices through the main internet connection (uplink), no matter what your routing settings are. This ensures reliable management of your network.

So, the test focuses on the VPN path, while the dashboard communication uses the direct internet path.

[PhilipDAth]

I don't believe this is the case, but I can't find a link that states it.

I believe that even with a default route in AutoVPN mode, all traffic to the Meraki cloud, including speed test traffic, goes via the local management IP address and the local connection, and not inside the AutoVPN tunnel.  It is a special exception, so that management access to the Meraki device will not be cut off if AutoVPN is down.

[ksumann]

Did you try it out?
In our setup, having full tunnel and only specific routes, the throughput test worked fine.

After adding a VPN enabled default route, the test stopped working because its put into the VPN.

[PhilipDAth]

Here we go:

https://documentation.meraki.com/MX/Site-to-site_VPN/Meraki_Auto_VPN_-_Configuration_and_Troubleshoo...

"Note that full-tunneling only affects client data and all Meraki management traffic will egress directly via the primary WAN regardless."

[ksumann]

And thats confusing.

There might be cases where the dashboard is not reachable from within AutoVPN, so the test will fail (or showing 0 Mbit) while the device is connected to the dashboard.

Maybe it should allow to select the interface to run the test, ignoring the routes.

[cmr]

It will time out in that case, I have had it happen a number of times.  I agree it should use the same route as the management traffic.