The fact that this is the only comment i can find mentioning "you can obviously run a MX in routed mode as a hub too" bothers me..   We are planning an SD-WAN network for a costumer, where we want to use an MX as the VPN hub, perimeter firewall and LAN GW. Plus there are some low traffic public services that needs 1:1 NAT to a public IP pool.   Because of the lack of BGP option on the WAN port, a Cisco router would be the CE handling the two Inet uplinks and the public IP pool advertisement to the PE.   As far as I see, it should work, even with warm spare redundancy if there's an SVI in the CE , but I cannot find any confirmation. Only this sentence.. ... View more

Agreed that there is a misleading on this picture.   Make sense, two MXs in front of the MX concentrator HA pair, then the ebgp can be utilized to Big office internal network or Datacenter internal core, and autovpn ibgp as wan fibric network :).   Let say, the front MX working as firewalls, inspect traffic for DIA and internet underlay path resilience, and this will allow to use full feature sets of the firewalls functions, and the concentrator HA pair designed for terminating the autovpn fibric connections only.   However, if the routed mode MX can keep all feature sets, then converge the front end MX and concentrator HA pair into one pair will save two front end MX or firewalls :).         ... View more

Hello @GregLiu! Welcome to the Meraki Community! It is a great community to be a part of and we are glad to have you here! Lots to learn about the API! Plenty of code versions to choose from as well. ... View more