Well done everyone! ... View more

Yes, that's what the layer 7 deny rule for remote ip range is for. I don't think you can do anything in the forwarding section for this though. ... View more

Unless you use location tags like we do so that non-Meraki peers only connect to certain locations.  If the system could be setup so that you could assign VPN rights to only add certain tags it would even be better.   IE, Joe Blow can only add/modify VPN routes with the "HQ" tag.  Pie in the sky wish! ... View more