MX Client Tracking Options with VPN Concentrator

[RWelch]

I am hoping to get a better understanding after reading the recent Documentation Digest: June 14th - June 22nd specifically regarding the MX Client Tracking Options.

I appreciate the document changes (as well as new articles) but struggle with understanding which client tracking option to go with:

1. Unique Client Identifier or 

2. IP Address

My current setup is a “combined network” with the below hardware BUT choosing IP address isn’t an option.  Perhaps I need to “split the network” to be able to use IP address option?  And is IP address the right choice when using the MX95 as a VPN concentrator behind another MX95?

Combined network:

MX95

MS350-24 (L3)

MS120-24 (L2)

MS120-8FP (L2)

Separate organization

MX95 as a VPN Concentrator

Thank you for any feedback you might offer.

[alemabrahao]

Maybe it will help you.

https://documentation.meraki.com/MX/Monitoring_and_Reporting/Client-Tracking_Options

[rhbirkelund]

In most cases you would simply just use Track By MAC Address.

The Unique Client ID is primarily used for when you are doing some form or L3 routing between your end users and the MX, such as a single VLAN on the MX, with some form of L3 routing between vlans on a downstream switch.

[rhbirkelund]

In your case, if your network is a simple flat network structure, with all network segmentation being done with Vlans on the MX, and the MS350 as a collapsed Core-Aggregation switch and MS120s as access layer, with no L3 interfaces on the MS350, you'd just use Track By MAC.

[RWelch]

Sorry - I should have included that this site serves as a HUB for 4 remote sites with 5 VLANs per site.  Each remote site has 1 VLAN enabled for VPN access to the HUB.  I felt configuring L3 routing at the HUB to be the best option or choice for the setup.

[rhbirkelund]

The Hub should probably still use Track by Mac. 🙂

[PhilipDAth · Accepted solution]

You should be using "Unique Client Identifier".

https://documentation.meraki.com/MX/Monitoring_and_Reporting/Client-Tracking_Options#Unique_Client_I...

[RWelch]

Thank you @PhilipDAth