Hello,   Can anyone please provide some information about how AP builds the VPN with Meraki MX? does it contact the MX public IP then fallback to its private IP? or it only contacts the public IP?   I explain, we have a MX used for L2L VPN and AP teleworker vpn. we use manual NAT and unfortunately this parameter is global. We cannot (do not know where to) put the MX private IP for the AP and the MX public IP for L2L VPN.   the MX is behind a checkpoint firewall and the checkpoint is dropping UDP traffic from AP (internal IP) to the MX public IP (issue with the checkpoint). So if the AP fallback to to the MX private IP, i will just block public traffic and allow private traffic.   What do you think about this?   Thanks  ... View more