Interesting because i got the idea to do this from meraki support.   they said the way vpn is handled within the firmware is completely different from MX15.xx   but nice to see it also solved your problem. ... View more