Why Are Spokes Still Showing Both Hubs After Removing a Hub from the Template?

[MerakiMaverick]

Hello Meraki Community,

I have a quick question regarding AutoVPN in a hub‑and‑spoke design. I have about 200 spoke MX networks and two datacenter MX networks configured as hubs.

All spokes use a configuration template, where both hubs are assigned.

If I remove one of the hubs from the configuration template that all spokes are bound to, why do I still see both hubs listed as VPN peers on the spokes?

Is this the Meraki AutoVPN introducing all Hubs into the Hub and Spoke topology regardless of template configuration?

Thank you!

[alemabrahao]

The fact that it's listed doesn't mean it's in use, but in short, simply because they belong to the same organization.

[MerakiMaverick]

Thank you, @alemabrahao. I removed the hub from the Security & SD‑WAN → Site‑to‑site VPN section in my configuration template. However, the MX network that previously acted as a hub is still showing as a “Hub.” in the spoke networks.

If I want to use this MX as a test hub, how would I go about doing that? For example, can I have a production hub‑and‑spoke topology and a completely separate test hub‑and‑spoke topology? It seems that as soon as an MX is configured as a hub, it automatically gets included in the AutoVPN topology.

How can I separate or isolate a hub so it can be used only for testing? different organization for testing?

Thank you!

[rhbirkelund · Accepted solution]

You can not have multiple AutoVPN fabrics in a single Organization. There can be only one (pun intended).

You’ll need to move the Test hub to a separate organization, if you do not want it included in your production fabric.

[alemabrahao]

This is your answer.