What is the propuse of this

[athan1234]

Can someone please explain what the purpose of this is?

[KarstenI]

Sometimes you want that also the branch offices send the internet traffic first to the Hub and from there into the internet.

One reason could be that your MXes only have the Enterprise license without any NGFW security. But on the headquarter you have an additional NGFW to protect the traffic. Here it could be useful to use the headquarter as the central internet break out.

[cmr]

Exactly what @KarstenI said, we do this for the reason mentioned.

[alemabrahao · Accepted solution]

Here is the extra information: https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#Default_Route

https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior#Route_Priority

Default Route

When configuring Hubs for a Spoke, there is an option to select a hub as being a Default route. If this option is selected, then that hub will be configured as a default route for the Spoke (0.0.0.0/0). Any traffic that is not sent to a configured VPN peer network, static route or local network will be sent to the default route. Multiple hubs can be selected as default routes. Hubs marked as default routes take priority in descending order (first priority at the top).

[athan1234]

Thanks @cmr  @alemabrahao .