indeed, but I am looking for a new supplier who offers this solution ... View more

Hi @sj093    Take a look at Flow Preferences. You should be able to achieve what you’re after   https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences ... View more

@sj093 : Cisco Meraki uses IPSec for Site-to-site and Client VPN. IPSec is a framework for securing the IP layer. In this suite, modes and protocols are combined to tailor fit the security methods to the intended use. Cisco Meraki VPNs use the following mode+protocol for Site-to-Site VPN communication https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Networking_Fundamentals%3A_IPSec_and_IKE   ... View more

@sj093 I sent you a direct message.  ... View more

If you connect directly to the vsat circuit, does it work?  If so, when you connect the MX WAN port to it, does it get the same IP address and if so, does the MX see the Meraki cloud servers? ... View more

It's probably a good idea to open up a case with Meraki support in this case. ... View more

@sj093 my only comment is that you seem to be giving most categories almost full bandwidth, and one more than full.  I'd normally expect less for each category, but without knowing what they are it's hard to say. ... View more

Yes. ... View more

@sj093, there is no way to manually delete a lease in the MX DHCP server. The lease will be removed, and thus the IP address made available for another system, when it expires.  As others have said, your two options are to use shorter lease times, or a bigger subnet. If the systems attaching to this network are changing regularly then you want to shorten your lease time. If it’s that you have a large number of clients connected then you could move to a /23 subnet, or consider whether you should be introducing another VLAN/subnet. ... View more

Thank you it works now ... View more

The firewall has it's L3/L4 rules and it's L7 content filters.   Group policies can also contain these rules but can dynamically pushed to a network client. However group policies can also apply to a wireless client and then it's the AP firewall that counts.   These rules in group policies can override the firewall or in case of content filtering it can work additive to the existing policies. ... View more

@sj093 Hope all clarifies! ... View more