Site-to-Site VPN subnet translation for multiple VPNs

[WimC]

Hi, 

This might be a stupid question as I'm not all that well versed into more complex networking and Meraki. 

Situation:

We have a (hard) requirement from a vendor to connect to their appliance via a local subnet IP. 

These appliances will be installed on multiple locations behind (MX to MX) Site-to-Site VPNs.

All sites have a different subnet so there isn't any overlapping.

We already let Meraki support activate "IPv4 VPN subnet translation" for our company.

Problem:

We can successfully do a single "local subnet to VPN subnet" translation using the "IPv4 VPN subnet translation" feature but will need to do more translations in the future as more sites will be added. This feature only seems to allow a single entry per local subnet (and also not per remote subnet so there might be some extra issues there where it will also be translated on the other VPN sites where it shouldn't.)

Example connection (client <> appliance):

192.168.0.5 (translated to 10.0.0.5) <-S2S VPN#1-> 10.0.0.9/24
192.168.0.5 (translated to 10.0.1.5) <-S2S VPN#2-> 10.0.1.9/24

Is this even possible on Meraki?

Kind regards,

Wim

[alemabrahao · Accepted solution]

Unfortunately not, for now this is the option that Meraki offers.

[WimC]

I'm sad to hear that. 😕

Guess we'll just put an EdgeRouter in the VPN networks and NAT on there, as a second MX for just NATing would be overkill. 

I also asked support in parallel and they gave me the same answer.