Thanks! This works. What protocols exactly does Meraki require? ... View more

Also, how many IPs we can add in a Rule. Does adding each IP in a rule will count as a single Rule. Ex. If I add 10 subnets in a Rule does it act as a single rule or 10 rules ? ... View more

The Group Policy is applied to the device, not the user - generally this is by MAC address. Note that the MAC address will be that of the VPN adapter on the client, so different to its Ethernet adapter. Thus if a client connects via Client VPN and directly to the MX (e.g. in an office) then it will appear twice in the client list - once for each MAC address, and so could have a different Group Policy assigned for each. ... View more

@ShadowoftheD wrote:     If i apply this only and they still connect via WAN1, would that be fine?   That would be Asymmetric. Traffic enters WAN1 and exits WAN2. It would be better to set ANY/ANY/ANY rule for WAN2 and allow VPN Clients to use WAN1 for and "everyone else" to use WAN2. If you have two quality internet links this won't be a problem. However, if WAN2 is 7/1 DSL then this won't be an option.    @ShadowoftheD wrote:   I'm sorry could you explain "full tunneling?   Meraki VPN makes ALL client traffic go through the MX device. This means if user is watching YouTube instead of working, they are wasting your bandwidth. So for Client VPN users, limiting their bandwidth or might be necessary if you don't have strict policies in place for your network.    You can use split tunneling pretty easily with powershell scripting and Windows 10.    See this thread to look into implementation of Split Tunneling. (Thanks so much to @Nash for that script!)   -T800   ... View more

thanks. but this also affects my site to site vpn connection as well right? like i.e. they'll have to peer with WAN2 now? thanks ... View more