Fully meshed vpn

[Sugata]

I have been told that the MX firewalls work on a hub and spoke configuration and that if two satellite sites want to communicate together they need to route via hubs.

Is this correct? Or is there a simple way to configure a fully meshed environment?

We are replacing Cisco routers that are currently fully meshed using DMVPN and BGP.

[Brash]

Meraki AutoVPN can be setup as Hub and Spoke or as Full Mesh.
It's as easy as selecting the option when setting up AutoVPN in the dashboard.
For full mesh, every node is configured as a hub.

For hub and spoke, you specify your hubs and your spokes.

Of course there as multiple differences, pro's and con's for each topology.

The following doc provides a lot of info around this.

Meraki SD-WAN - Cisco Meraki Documentation

[cmr]

You can also mix mesh and hub/spoke.  We have all our main sites set up as hubs so they mesh together, but home user Zs and MXs are only set up as spokes to the datacentre hubs.  The reason for this is to reduce the processing load on the smaller devices we use in people's homes.  To access resources at the other sites, they simply route through the connected hub.