This isn't best practise as the MS has no intrusion prevention or any other security features built into them because they are not designed to be public facing.  ... View more

Datasheet for MS120,   https://documentation.meraki.com/MS/MS_Overview_and_Specifications/MS120_Overview_and_Specifications?file   Supported L3 models can be found here:   https://documentation.meraki.com/MS/Layer_3_Switching/MS_Layer_3_Switching_and_Routing ... View more

Yes exactly that.   Reserved IP is taking those IP addresses out of the DHCP scope. ... View more

Yes, all the traffic will go through spare MX ... View more

Just one LAN IP ... View more

I understood your original post that these IPs are from an additional subnet and not the interface IPs. If these are the interface IPs it can work, but your peer has to reconfigure the tunnel to the Spare-IP in case of failover. Interface IPs are fixed to the device and don't swap as it is done with the ASA for example. ... View more

Meraki client VPN is available on all tiers of MX license. Anyconnect client VPN on the MX requires purchasing additional licenses https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance ... View more