Hi I've linked a GP to default VLAN that block some subnets used in auto-vpn. all seems configured in the right way but I'm still able to access to the resources I want to block ... any suggestions ?   Thanks   ... View more

Great video but I must have missed something. My Site-B is configured as 'Spoke' selecting Site-A as hub. Site-A needed to be set to 'Hub'. VPN status is green. Both IP ranges are different, one 10.10.... and the other 192.168.... When I map from computer/Site-B to share on computer/Site-A it will not connect as simply in your video. Using Windows 10. What am I missing? ... View more

https://community.meraki.com/t5/Security-SD-WAN/Local-breakout-from-autovpn/m-p/92208 ... View more

Evangelism aye, so when is your bible due  🤓?   I never knew what detasseling corn meant, thanks for that. ... View more

Thanks.  If you read through my conversation with PhillipDAth you'll see that I did just that both on the radius server and the MX.  I was getting ACCEPT packets and they were being seen by the MX.  In the end, radius *was* failing between the client (MX) and server (M$ NPS) because the PSK was too complex and I needed to remove non-alphanumeric characters.   It doesn't explain why I was getting the ACCEPT which was seen by the MX and was failing between the LAN interface and the Client VPN. ... View more

Hi Tim,   The blocked URL patterns field needs to be formatted according to the description in this document. Since the MX is a stateful firewall, inbound traffic will be blocked unless it is return traffic for an existing flow. I would move those IP addresses into layer 3 outbound firewall rules. That should accomplish your goal. ... View more

Hi Vince!   This message doesn't indicate a specific issue, however it can be associated with a configuration mismatch of some kind. When the issue is occurring (when the tunnel is down) the MX will generate more useful logging messages that Meraki support will be able to help you interpret. If you're able to, it would be ideal if you can leave the tunnel in the broken state and call into Meraki support before the tunnel comes back up. We'll be able to better diagnose the issue if we can see the logs in real-time. Thanks! ... View more