Thank you jdsilva. Noted on the /30 subnet front. I had naively assumed that the warm spare MX would pick up the same IP address schema as the active if the active failed. KB -https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Site-to-site_VPN_over_MPLS Really good KB, and my design is now based on the above, but ensuring the MPLS. Luckily the MPLS can connect out to the internet at a hub site, so it seems to be working so far.
... View more