Ok....thanks!  I will "make a wish "to make VPN hair pinning possible, especially from the headends.   I did it on a PIX 520 probably 20 years ago now when VPNs first came out. ... View more

Thanks!  One final question... 🙂  Would a similar workaround be needed if the headend was a MX450 instead of a vMX100...physcial device vs virtual?   I have been routing since the Novell days, including 6 years at Cisco HTTS/TAC, and I am trying to wrap my head around why the vMX100 cannot route between two subnets in its routing table. ... View more

So, the vMX100 will not route between the two tunnels?  So, I will need to create site-to-site tunnels from every Auto VPN spoke to the 3rd party VPN?    Doesn't that waste the whole hub-spoke benefit of Meraki?  It seems creating one VPN to the 3rd party from the vMX100 would be a lot simpler than hundreds of 3rd party VPNs from the MX84s. ... View more