In routed mode 19.x - vmx-LAN and vmx-WAN should be separate subnets under your workload vnet.  then in your host subnet under that vnet you can then change routetable to make the default 0.0.0.0/0 to point to the vmx-LAN IP.   just make sure that you have the proper meraki "addressing & VLANs" settings are applied in the meraki portal. LAN config correctly set to your azure provided vlan interface IP  static routes set to the workload vnet subnets (where the virtual machines are) with the next hop IP as the azure subnet route IP (not the vmx subnet LAN ip) referring to this section: When configuring your vMX appliance within an Azure subnet, it's crucial to understand Azure's IP address reservation scheme. Azure reserves the first four IP addresses in each subnet for essential network functions. For example, in the 192.168.1.0/24 subnet:   192.168.1.0: Network address 192.168.1.1: Azure default gateway 192.168.1.2: Azure DNS 192.168.1.3: Azure DNS     ... View more