Hub and Spoke Puzzle

[TDevanney]

How could by spokes communicate with each other yet not with my hub?

[ww]

Using vpn firewall rules

https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior

[alemabrahao]

One question, do you want them to communicate without having to go through the Hub?

[TDevanney]

I do want them to communicate.  I didn't really explain my issue well.  My issue is that neither spoke appears to be communicating with the hub.

[alemabrahao]

I believe it is very difficult not to communicate with the Hub, as communication between two spokes must go through the Hub, how did you find this out? Did you do a packet capture on the Hub?

[ww]

Are the hub subnets in the spoke route table?

 Are the routes on the sub set to participate  in vpn?

Any vpn firewall rules that prevent this?

[PhilipDAth · Accepted solution]

>Are the routes on the hub set to participate  in vpn?

+1. This is the first thing I would check if there are no VPN firewall rules.

[TDevanney]

I searched route table and found an old route that was taking priority.  Deleted old route and now good.  Thanks.