The problem is VPN, Because Meraki MX made Auto VPN, all subnet still can see each other, go to SITE TO SITE VPN and make rule there as well. ... View more

This was a cloud-based change, does not require any firmware changes. ... View more

@DavidB Did you miss the diagram above? This feature won’t work. Split tunnel mode is being used. Policy is the only method to restrict the requested setup. ... View more

Ignore my reply, page didn't load previous comments.... And I can't edit mine. ... View more

I can confirm that assigning a specific subnet out of a template pool to a given site is doable if you'd like it; otherwise, you just specify the supernet you want individual sites to pull their subnets from, and the template will take care of the rest. ... View more