Hi @DaltonWoolsey I tried that configuration above and my users still can't connect.   They're using Windows Home 10, and I we found that they can only connect when they're using Admin accounts from Meraki but unable to when they're only using Users.    Thanks ... View more

WAN1 = 1.1.1.1 WAN2 = 2.2.2.2 Main Subnet = 10.1.1.0/24 VPN Subnet = 10.2.2.0/24     Thanks. although I'd rather not touch the way they connect via vpn (via WAN1) since that woulld mean reconfiguring 80+ users again lol.    3. Make a 2nd rule that allows ANY traffic with source of 10.2.2.0/24 with destination of 0.0.0.0/0 to prefer WAN2.    If i apply this only and they still connect via WAN1, would that be fine?     That should work. You might also want to make a traffic shaping rule so that " localnet:10.2.2.0/24" is shaped to a per client throughput if you are "full tunneling" your traffic.      I'm sorry could you explain "full tunneling?   Thanks That should work. You might also want to make a traffic shaping rule so that " localnet:10.2.2.0/24" is shaped to a per client throughput if you are "full tunneling" your traffic.  ... View more

thanks. but this also affects my site to site vpn connection as well right? like i.e. they'll have to peer with WAN2 now? thanks ... View more

Thanks. Although, its not a number of rules, but rather 1 rule where i just continually add in ip addresses. like x.x.x.x/32, y.y.y.y/32, z.z.z.z/32, etc i'm actually concerned since we've been doing this for around 2 + years now and I know there will come a time that the ip addresses entries and urls will cause a slowdown or worse might hang the device and i want to know what is that threshold or what's the next possible step that i should do when that happens. Thanks ... View more