how to Isolate a MX site in the network

[Syed12]

Hi,

I have a scenario where I will be required to isolate one of the Meraki sites immediately. It will be easier if its a stand alone device but how to isolate one of the networks/site from the SDWAN network if we are using templates?

Thanks

[DarrenOC]

I’m not familiar with working with templates but couldn’t you pull the site out of the sd-wan by removing the local VLANs out of the tunnel.

[PhilipDAth]

Create a VPN firewall blocking traffic to and from their subnets.

https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior 

Option 2, have them turn their MX off.