Meraki Community

RobbieCFSFL

According to the Meraki team, if we want to provide that VPN connection to branch sites in the SD wan, there needs to be a router serving the tunnel on the Lan side of the mx450. We do not want each branch site to create a tunnel to Azure and instead want to serve tunnel at the datacenter only - which will serve the tunnel to the branch sites.

RobbieCFSFL

We currently have an MX85 behind an MX450 that only connects to an Azure VPN that feeds it back to the MX450 lan. The MX85 is in routed mode. After doing some reading, I'm seeing that we might be better off just having that MX85 in one-arm concentrator mode since nothing else will be connecting behind the MX85. Is one-arm concentrator best practice for this application? Other than bypassing having the MX85 having a firewall, are there any other advantages? Thank you for any help and time you spend answering.

Meraki Community

About RobbieCFSFL

RobbieCFSFL

Community Record

Re: Routed or One-Arm Concentrator

Routed or One-Arm Concentrator