I'm trying to configure a zone for Direct Internet Access (WAN1 Interface) and MPLS (WAN2 Interface) on a Meraki MX100 (our Internet Firewall) connected to a Meraki MS425 (our brand-new core switch), where all zones come together (DMZ, Corporate, Internet, VPN, VoIP, etc.). Right now, I've got the first zone (Internet and MPLS) planned for the MX100 in its own zone, with MX64s each providing firewall and routing for their respective zones as mentioned above. Downstream, I have a MS425 in its own zone. The MS425 is, as I said, our new core switch, which will have new Meraki MS210 switch stacks acting as access switches (I don't plan on using aggregation switches in-between the access layer and core). I'm looking for examples of multi-zone configurations, including setting up communications between the different zones and the core MS425. At this point, I can't even figure out how to configure the MS425 to talk to the MX250 - the zone issue is preventing me from deciding whether I need to use MAC address-based client tracking or IP address-based client tracking.   This was so much simpler with Cisco devices! ... View more