Hello!   In a dual-WAN AutoVPN setup with both uplinks active, we should have 4 tunnels (wan1↔wan1, wan1↔wan2, wan2↔wan1, wan2↔wan2).   We are seeing cases where only the tunnels for one uplink are established. Both WAN interfaces show active/up, but the secondary uplink does not form AutoVPN tunnels.   Impact: VPN works while the primary uplink is up When the primary uplink fails, AutoVPN does not fail over Tunnels only recover after rebooting the MX   Currently the API only shows statistics for existing paths, so the missing tunnels are only detectable by the reduced path count or 100% loss, not by an explicit tunnel state.   Maybe the Meraki team could expose per-uplink AutoVPN tunnel status (established / not established) so we can detect this condition.   Anyone has the same scenario? ... View more

Hi all,   Quick question to validate my understanding of Site-to-site VPN Translation (1:M) on MX. In this mode: Multiple internal prefixes / hosts are translated Traffic is NATed to a single /32 address From the remote site perspective, all traffic appears to come from one source IP   So effectively, although documented as 1:many, the behavior on the destination side looks very similar to source NAT (many-to-one): The destination only needs to route and permit a /32 Original source subnets are not visible for policy enforcement     https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Configuration_Guides/Site-to-site_VPN/Using_Site-to-site_VPN_Translation   Does this match your experience with Auto VPN translation?   Thanks! ... View more