Hi all, I have a remote site from which all the traffic should be routed to the L2L tunnel except 2 IPs located somewhere in the Internet, lets call them x.x.x.x/32 and y.y.y.y/32 (these 2 are the IPs of SSLVPN gateways and I see no point in pushing the traffic to L2L tunnel just to establish SSLVPN tunnel). I haven't found any straight forward solution to configure it. Under the configuration of VPN where I have Non-Meraki peer I can put, under Private subnets, only these subnets that are supposed to go through the tunnel. I would be great if there was a possibility to put 0.0.0.0/0 minus x.x.x.x/32 and y.y.y.y/32. I've tried to achieve that with static routing (Private subnets was 0.0.0.0/0 and x.x.x.x/32 and y.y.y.y/32 were routed to the Internet address) but no luck.  Does anybody configured such thing? I imagine that it is not anything uncommon particularly with remote offices.   ... View more

Hello    Is there a possibility to initiate L2TP VPN client tunnel being in the inside network that is behind MX? This question originates from the situation where MX doesn't have any public IP (ISP does at least 2 NATs between this network and Internet). So to remediate having no public IP the site-to-site tunnel, using IPSec, would be established between MX and some Linux in cloud. That would take care of going to the inside network and ideally would give the possibility to port forward inside interface of MX to the public IP (of Linux machine) to establish L2TP tunnel. ... View more