It appears my meraki is behind pppope router it has the following config
Public ip 209.xx.xx.109
isp provider url
WAN
Status active
Virtual IP . nothing
gateway . 192.168.x.1 . (internal router ip)
dns 192.168.x.1 (internal =router ip)
8.8.8.8
My question is better to setup a sdmz on the router to setup vpn or make the firewall a ppope device and reconfigure it