Sorted thank you - I rebooted the MX now working fine    ... View more

I've just applied the rule at MX firewall not at the Wireless firewall. ... View more

Pinging from device in vlan1 to a device in vlan 2 ... View more

Workload Peering       vMX//Firewall Peering   If you want the full pictures happy to PM them to you ... View more

Sorry I should clarify.   Workload vNEt - No Ping to Meraki Spoke   vMX - vnet - I have a test machines in a different subnet but in the same vnet (Effective route below) this can ping the Meraki Spoke The Subnets in the vMX Vnet are  Meraki spoke (on prem) - can only ping the firewall and the vmx  ... View more

That is the effective routes of a a server in the workload vnet ... View more

Here are the effective routes      ... View more

Hey - I have the BGP routes being advertised now - Whoop I can from the vMX subnet on a test machine ping devices on my lan side.   But cannot ping from my workload vm to lan side of things   Also cannot access the workload subnet from on premise even though I have the routes propegated  Currently the firewall has an allow anything from my lan to drive out any FW issues. The workload vnet has a udr route to the firewall and is peered with the vnet containing the firewall   Any suggetions?? ... View more

Let me test that will let you know the solution 🙂   ... View more

I am just in the process of scrubbing the environment again except the vMX -    With regards to the workload vnet they are the only ones peer to the network hub.    With regards to RT in the workload that is just routing to the firewall   I was more looking to confirm the RT in the networking (hub) vNet the RT that associates the vMX subnet what routes should be placed there pointing to the Firewall?  ... View more

Okay,   This is how I have things setup    Azure   vNET (Networking vNET) Contains AzureFW Subnet Meraki SD Wan Subnet Route Server Subnet Azure Firewall  Rules for networking access to test device in server vNet All vNets outside of networking VNet are peered to the networking vnet and also have route table pointing 0.0.0.0/0 to Azure Firewall   Route Table Associated to the vMX Meraki SD WAN Subnet All Azure Vnets noted in correct CIDR format with next hop of Azure Firewall   Route Server  deployed with BGP Peers added routes still not appearing in Meraki     Site and Meraki    vMX configured as Hub Site MX is step up as spoke vpn connecting to the vMX as the hub (default route not selected to go via hub so that we can do local breakout and only use vpn for wan destined traffic) vMX has BGP ARS subnet added as route   The only thing that I can ping currently from On site is the meraki vMX (thats coz i have a static route added for the vMX to check that the other side of the WAN was up)   I have attached badly drawn diagram - am I missing something??     ... View more

Okay think that I am going to draw by hand (Quickly what I think the solution is) just to make sure that I am on the same page and you can understand my thinking.    ... View more

Thanks for this - Is it worth as this is in lab to look at utilising vWAN instead get that set up and then add in a firewall and adjust the routing.   ... View more

Hey Martin,   Question - I have had a look at the above and tested - I am not getting the BGP Peers to come up I have routed the vnets to the firewall and the default 0.0.0.0/0 to the internet - The routeserver subnet is added to the vMX so that they can form.   Any pointers - I can't find much reference documentation on these topics on MS..   ... View more

This makes a lot of sense 🙂 - Clarification question - IF you don't mind please...   * When creating the VNet are you saying that the Subnets for both the vMX and AZFW should be in the same VNet?     ... View more