no problem @JJM - hope that makes sense?
Just think, if you're outside your firewall/MX (at another site etc) can you ping/reach the IP of the device you want to VPN to? If you can't then the client VPN won't be able to connect to it.
All the best
Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/
I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.