Did connecting through the MS355 work for this?  I have the similar issue and was going to go through the MS425-16 and have a QSFP+ trunk to the MS450-12 as it acts as my core SW.  ... View more

Inbound rules in a decent size company are critical. Things like Okta, business apps like oracle ebs/obi that are inbound for invoice approval etc. then there is rules to allow FTP, inbound for payroll etc. Is the Meraki considered an Enterprise platform? It should not take a support ticket to implement an inbound rule. 1:1 Nat should address this and perhaps policies are able to be configured once Nat is available. Sonicwalls and Palo both have inbound capabilities out of the box. I’m sure Meraki does and perhaps the configuration is just a bit challenging like all new platforms. ... View more

First note that the VMX is only available in Amazon AWS and Azure.   If you are needing to terminate more VPN tunnels that a single VMX can handle or want to drive more bandwidth then you can change to using an active/active design and purchase a pair of them.   Aaron Willette has an article about how to do this. https://www.willette.works/active-active-meraki-sd-wan-headends/    ... View more