Did anyone ever find a solution to this? We have the same issue. Meraki said it was due to the TTL setting for the DNS domain. Most AWS DNS resolvers like Route53 has a TTL of 60 seconds. What I noticed was the local breakout would work for 50-60 seconds then revert to going across the tunnel instead of the local internet.  ... View more

Just to add to this, the non-Meraki VPN method will only work if you separate this site into a different dashboard organization, since enabling VPN will automatically create an AutoVPN connection. You can manage multiple organizations from your dashboard account, so this could be a potential solution to your particular design needs. As mentioned by everyone else though, preventing a single hub from speaking to other hubs is not possible.  ... View more