Meraki MX site to site VPN where DHCP server is sitting on the other VPN tunnel end

[TobyWanKenobi]

Hi All,

We have got a working Meraki MX64 with site to site VPN setup with a non meraki peer.

On the MX we have set: Hub (Mesh) mode

We have got several VLANs configured. 

From each of the local VLANs I can connect to the other VPN Tunnel end. (i.e. Ping the DHCP server)

However, a device booting in a local VLAN doesn't reach the DHCP server on the other end of the tunnel.

On the LAN interface I was able to see the DHCP request (with the correct IP Helper address on the VPN peer)

Is there something I must enable on the MX to get it working?

Thanks Toby

[Bruce · Accepted solution]

I don't think you'll get this working - there are other posts with the same issue on the community. In addition, the Configuring DHCP relay document for the MX, https://documentation.meraki.com/MX/DHCP/Configuring_DHCP_Relay, has this note about half way down: "Note: The DHCP server configured must be in a subnet configured on the MX, including directly-connected VLANs, static routes, and subnets participating in AutoVPN. DHCP servers sitting behind a 3rd-party VPN peer are not supported."

EDIT: Also, https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Configuring_DHCP_Serv... states "Note: On an MX, the DHCP server cannot be over a 3rd party VPN peer connection."