With step 2, is there anyway to automate making that change across multiple laptops?  A powershell or cmd script? ... View more

One caveat though. You cannot implement cert-based auth alone. You have to use cert + user creds on Meraki. ... View more

Looks like the problem here was with Symantec. Our symantec antivirus includes its own firewall settings and was blocking the IP subnet on the meraki VPN.  Adding a rule to allow this subnet fixed the problem.  Thanks for all of the replies and help! ... View more

Yes you can create inbound NATs on both circuits. https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Port_Forwarding_and_NAT_Rules_on_the_MX    As well as the option mentioned by @Nash , you could also use a DNS service like Amazon AWS Route 53 which lets you configure health checks and perform automatic DNS failover. https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-failover.html  ... View more