Hi,   I have read the Meraki documentation in setting up a VPN tunnel from Meraki to Non Meraki. If i understood it correctly, firstly this can only be done on MX that has been configured as Hubs. Secondly, I just need to key in all the necessary IPSec policies vice versa in Meraki and also in the Non Meraki Peer. Next, i would need to key in the destination IP of the Non Meraki Peer. Do correct me if i am wrong.   Now, i have a customer that is giving us some portion of their sites for us to manage. Currently they have 20 sites. They are giving us 8 sites (only branches), the other 12 sites will be coming to us but at a later time due to ongoing  contract with the current incumbent.    So, the first 8 sites that they are giving us, i am proposing to deploy Meraki MX67C. However customer also requires IPSec tunneling from those 8 sites to their HQ, pointing back specifically to a SOPHOS XG430.   Based on what i have read, in order to achieve what is required, i need to :   1) Configure all 8 MX67c as hubs 2) Configure the same IPSec policies, destination IPs, etc for all 8 MX67c   Im not well verse in SOPHOS, but based on the XG 430 documentation it can support up to 3000 concurrent IPSec tunnels.   My question is, can this be done? all 8 MX67c configured with the same IPSec policies, destination IPs, creating the IPSec VPN tunnel to SOPHOS XG430.   Has anyone here have any experience deploying this kind of scenario? ... View more

Hi,   Im planning to consolidate a customer's require of internet and sip trunk using meraki mx.   I have 10 sites (1 HQ and 9 branches)   all of those sites will be using the following WAN    WAN 1: Dedicated Internet Access WAN 2: Broadband Internet (best effort)   I have a SIP trunk server that resides in my core network (we are an internet service provider company)   So the plan is when we configure the MX, for voice traffic i need to point it to my SIP server IP from the HQ since customer has their own IP PBX resides in their HQ.   While the rest of the branches in order for them to make a call they have to go to the IP PBX that resides in HQ and from there it will go to our SIP server.   If i were to configure the branches to go thru HQ first (since the IP PBX is in HQ), that means for voice configuration from branches i need to point it to the IP address (or vlan if we decided to group certain policies in vlan) of the IPPBX right? instead of configuring the branches MX to point it to my SIP server   What would the best approach for this?   Regards, Zul ... View more