Helo @Mohanms , MX2 is normally passive and should not handle any traffic unless MX1 is down .  if the MXs are connected to the same ISPs  check the cabling  , check if you have misconfigured a vip for the MXs, if you disable MX2  as a spare, what's the output of the Tshoot ? are you sure that the MX1 and 2 see each other through LAN (VRRP) and are on master/spare mode ? they may be both on master mode and you have an asymmetric routing . I think that a deep Tshoot can show what's wrong in this case , if all is good, I suggest that you ask for Meraki support help . ... View more

Thank you @Christophebe  !! ... View more

Another way to troubleshoot that under a minute.   Take a packet capture.  Run your tests / calls  Sort all the conversation without any packets from B -> A ( B = destination , A  = your source client ). Which means the firewall was blocking the outbound packets. ... View more

Hi, go to services.msc -> Routing and remote access -> change "start type" to Automatic (Delayed start) and click "Start" Establish a LT2P connection. FIXED ... View more

Trying to achieve it that way is just asking for trouble. These two ways are proven to work: Move the server into a DMZ at the hub location. Place a reverse proxy in a DMZ at the hub to forward the request to the spoke.   ... View more

As far as I remember this configuration is not possible unless you have a point to point between the two sites. ... View more

i had a same issue ... View more

If you have a third party vpn with a 0.0.0.0 route.  All vlans with vpn enabled can only use this default route.   https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#Non-Meraki_VPN_peers   ... View more

Well, I didn't suggest it before because you said that one of MX cannot have access to the internet, but ok. ... View more