hairpinning Meraki MX?

[hmc250000]

Is hairpinning (traffic making a u turn in and out of the WAN interface) supported out of the box on MX appliances? 

On Cisco ASA this has to be configured.

[Nash]

@jdsilva was able to pull off something hairpin-y: https://community.meraki.com/t5/Security-SD-WAN/HairPin-Nat-Loop-back-NAT/td-p/24268

[PhilipDAth]

You'll need to be more specific.

If you are using AutoVPN this this is automatic.  Remote branches can talk to each other routing via the hub.

[Ken_Kane]

I would like to Hair Pin via the "Non-Meraki" VPN peers. can that be accomplished? we set up an ASA in AWS and use that for Any Connect. the Any Connect is accessed via one port on the ASA and then we have an IPsec Tunnel to our Corp office MX via a second port.  the MX also has an IPSec Tunnel to our office in Japan. I would like to have Any Connect users access the office in Japan with the existing tunnels. The MX would perform the hair pin from one tunnel to the other.

[Bruce]

I don’t believe you will be able to do what you intend, the way you are describing. The MX won’t pass the traffic between the two third party VPN tunnels.

Probably the best approach would be to establish a VPN tunnel between the device in Japan and the ASA in AWS so that traffic can take that direct path, instead of via the Corp Office MX.