Hub & Spoke - Filter Branch Networks

[whistleblower]

Hi,

is it possible to filter VPN-Routes on the Hub, so that e.g. Branch Offices did`nt know each other?

[DarrenOC]

Hi @whistleblower 

yep, look at the "Limiting Connections Between Spokes" section in the below doc:

https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Hub-and-spoke_VPN_Connections_on_th...

[KarstenI]

What @DarrenOC mentioned is the way to go. But be aware that it is not route-filtering as you was asking for. The Branches still know the other subnets but the filtering prohibits them from communicating with each other.

[whistleblower]

I´ve seen that in the documentation... but as @KarstenI noted, this only affects the communication - the network-prefix itself still persits in the routing-table and that`s the point I was talking about! I´d like to filter the specific network out so that e.g. a also existin summary route is the preferred one!

[PhilipDAth]

You can not perform route filtering of AutoVPN routes.