Dear MarcP, You done awesome setup. i have 1 ISP and 2 mx84 main and spare. can you share overall setup how is config? now my main FW working fine but i unable to setup one the spare FW.  Thank you! ... View more

Hi matt20dion   Any luck on this issue?   I have the same problem using the same instructions as well as others I found. I have reviewed my setup like 4 times with no luck..   The documentation seems to be missing something or be incorrect as the other walkthroughs I found said I needed to use a policy based gateway and the Meraki instructions said routed.   Issue I found though is that policy based only allowed me to use a basic gen1 vpn which is not compatible with IKEv2.   Stuck on this one. ... View more

Hi RubenL   Only one tunnel ... View more

If you have the switches split to both be external and internal then you have two issues   Client mapping and topology etc. will get confused, leading to data that doesn't make sense From a security point of view, you are creating a serious risk that doesn't need to be there, I personally wouldn't want to create that risk just to save the cost of a couple of L2 switches. ... View more

It seems like spare MX is also responding to Azure requests and creating a tunnel which it should not, and this is messing with route table. only one tunnel should be connected for this to work. ... View more

looks like after tunnel lifetime the tunnel is removed. If there is traffic going through the tunnel it would keep the tunnel up. ... View more

You can have ikev2 activated on your MX and use Azure routebased vpn. I am using same setup but running into a strange issue that both the vpn tunnels at azure are now connected and vpn traffic is not passing. ... View more

For 4G to work you would need a static IP from your carrier - and very few carriers will do that. ... View more

To make this work you would need to get your cellular provider to give you a static IP address with no inbound filtering.   Very few carriers do this globally.  So you are not likely to succeed using this approach.     Your best bet is to deploy a VMX into Azure and use that for the VPN.  It will work with 4G connected MXs. https://meraki.cisco.com/products/appliances/vmx100  ... View more