Hi @MXBEGINNER , aha, so this is a trial.   As @Bruce mentions the upstream firewall is blocking the MX from registering out to the cloud.   Log into your dashboard.  Top right hand corner select Help, There should be an option for firewall ports.  Pass this over to your client as he’ll need to punch holes into this firewall. ... View more

Yes there is. As you've implemented the MX as a VPN Concentrator I'm assuming you are going to be using AutoVPN to connect to remote sites. So, some of the destinations will be your branch offices that you are connecting to to set up the AutoVPN, the other destination will be the Meraki Cloud and the Meraki VPN Registry. You can find the IP address and ports for these from the Dashboard, go to 'Help' (towards the top right of the Dashboard, and then 'Firewall Info'.   Generally since the traffic is all outbound initiated on the MX you can normally have your firewall rules to just allow all outbound from the MX. But I understand that sometimes there is a need to be more restrictive than that, and the above should give you all the information you require. ... View more

I think you would need to block reddit.com rather than www.reddit.com. ... View more

Answer 1   IKEv2 is supported 15.12 onwards. Non Meraki VPN tunnels are established using the Primary WAN Interface. It will failover and establish using WAN2. You need to make sure that the VPN Peer has WAN2 IP configured.   Answer 2   Its not supported for Non-Meraki VPN tunnels. AutoVPN tunnels have NAT available. https://documentation.meraki.com/MX/Site-to-site_VPN/Using_Site-to-site_VPN_Translation   Answer 3 SSL VPN is not supported yet ... View more

Our intention is to pool / load balance the bandwidth. ... View more

@tenista what VLAN are you access points configured to be on? ... View more