Hi @Kiwirotc    Please take a read through the below:   https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/Meraki_Auto_VPN_General_Best_Practices   Your MX250 should be in concentrator mode with the recommended design being it sat behind a firewall or in a DMZ     ... View more