Site-to-Site VPN Hub traffic

[diablo24]

Hi,

I have a question regarding when a Hub gets traffic destined for outside the VPN. How does that traffic leave the Hub?

Thanks in advance,

-Jerome

[alemabrahao]

Can you elaborate more on your question please?

[diablo24]

How does the VPN get routes outside the VPN?

[alemabrahao]

As @RaphaelL said that depends on your configuration. But the most common is via the default route.

[RaphaelL]

Hi, 

By leaving the hub you mean by which interface ? if so that depends on your configuration : https://documentation.meraki.com/MX/Deployment_Guides/VPN_Concentrator_Deployment_Guide

[diablo24]

What I'm trying to find which isn't very clear any one doc is, if a spoke wanted to leave the VPN, how does the hub get that traffic outside. (i.e. is it using the default route in the routing table? or is it using some other mechanism? WAN1/2?)

[ww · Accepted solution]

It takes the most specific route 

Or for same routes, https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior#Route_Priority