Z1 on a stick?

[ShawnD]

Is it possible setup the Z1 on stick?   I'd like to replace an ASA with a Z1, the ASA is currently setup with just a single Ethernet connection.

[BrechtSchamp]

Are you sure you want to do that? The teleworker really is a small device meant for only one user. It doesn't do any of the advanced security features that the MX does... The MX can do firewall on a stick. This article is similar to that use case:

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Creating_a_DMZ_with_the_MX_Security...

[ShawnD]

Very little traffic runs over this link so the through put should be fine.   We have them in similar environments servicing 20 workstations as a dedicated link for this traffic.

[BrechtSchamp]

Well I believe the guide I sent you should work for Z-series too. I haven't got a Teleworker device on hand so I can't check but I think they use the same configuration pages for the "Addressing & VLANs" and firewall aspects.

[ShawnD]

I'll give at go and report back.

[ShawnD]

So far looking good.  This guide here is pretty helpful as well:

https://documentation.meraki.com/MX/Deployment_Guides/VPN_Concentrator_Deployment_Guide#Deploying_a_...

[BrechtSchamp]

Are you deploying it for AutoVPN purposes? If not, be careful not to confuse yourself with that guide as it's geared towards AutoVPN concentrator deployment 😉

[PhilipDAth]

>Is it possible setup the Z1 on stick?

In short, no.

Longer; you can put the Z1 into VPN concentrator mode, but you will require something else to be the default gateway for the network and provide the routing to and from the Z1 at layer 3.  You can not have VLANs (such as an outside and inside VLAN, like you might have on the ASA).