Reach Azure over Meraki tunnel?

[mmzzaq]

Hi,

I have 2x MX75's on different sites (SITE A and SITE B) that are connected by a site to site tunnel with method autovpn. Site A also has a working non-vMX IPSEC VPN tunnel to Azure. Anything on SITE A can currently reach VM A like it should.

Question: is it possible for DESKTOP B on SITE B to reach VM A by going over the tunnel between SITE B and SITE A and from SITE A, traverse over the IPSEC tunnel to Azure? In other words: DESKTOP B needs to reach VM A over the tunnels. I tried some experimenting with static routes but can't make it work. Maybe i'm doing something wrong.

[ww · Accepted solution]

That does not work. Every mx need a (non meraki tunnel) ipsec to azure. The only way to get this working is using the bgp over ipsec

https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Configuration_Guides/Site-t...

Or meraki vmx in azure

[mmzzaq]

Ok thank you for the info.

[PhilipDAth]

You have to either use a Meraki VMX or BPG over IPSec.

https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Configuration_Guides/Site-t...