I'm curious, why were you trying to use IKEv1 instead of IKEv2? ... View more

I'm guessing EE have got IPv6 to IPv4 working properly then, which is good 👍 ... View more

You can do multiple S2S VPNs from Azure, the VPNs just have to be to different Meraki networks/sites. I'm not sure what you'd achieve with multiple S2S VPNs to the same site, unless you're looking at redundancy to different Azure regions? You can also achieve the HA configuration across regions with the vMX now, so that's an alternative. Have a look at these two documents.   https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Site_to_Site_VPN_tunnels_to_Azure_VPN_Gateway   https://documentation.meraki.com/MX/Other_Topics/Deploying_Highly_Available_vMX100s_in_Azure   ... View more

The problem is that it won't allow a situation where two site-to-site connections try to connect to the same foreign subnet because every Meraki router in the organization automatically makes a connection with each other. How do I circumvent this?   To clarify:   If I have two offices that I manage from the Meraki dashboard and I enable site-to-site VPN, the two routers will automatically start connecting to each other, even when I do not require this (which I don't). However, as a result, Office A will connect to subnet X, and Office B cannot connect to subnet X because it is already known. ... View more

@Matt-Ignite wrote: These look really good!   As someone who's had no end of trouble trying to get a USB modem working with the MX64 devices (and ended up giving up because it just won't work here), having an integrated LTE modem is a real benefit.    The downside is obviously the cost - the MX67C is twice the price of the MX64 by the looks of things. I'd pay a bit more for integrated LTE, but an extra $1000 is a tough sell to a customer when a USB dongle is only $50.   On the official Documentation page for the new devices (https://documentation.meraki.com/MX/MX_Overviews_and_Specifications/MX67_and_MX68_Overview_and_Specifications), there's mention of being able to set a custom APN via the dashboard UI. I don't support there's any chance of getting this added to the MX64 devices as well? That would be a huge help when dealing with 4G failover.   Cheers, Matt The MX67C in addition to having integrated LTE also has 2x firewall throughput so additional cost is reasonably justified. If still too steep for you/your customer have you tried the Inseego Skyus LTE device? It is "Meraki Certified" and the only device we deploy now because they have been rock solid for our clients that have purchased them. ... View more

Several days later, how is going now @InfinityDrop?   I've noticed here some issues with load balance too, no matter if running 25.09 or 25.11. ... View more