The problem is VPN, Because Meraki MX made Auto VPN, all subnet still can see each other, go to SITE TO SITE VPN and make rule there as well. ... View more

I believe you're going to need to use another form of authentication.  According to what you've said it sounds like RADIUS will do it. ... View more

@Bovie2K Agreed.   Agreed.   E.g. 1 year for 1 Device > Add 2 Devices > 0.5 Years for 2 devices. And 1 years for 2 devices > Remove 1 Device > 2 Years for 1 Device. ... View more