OK, makes sense.   Note that the recommended mode for MX Hubs in Data Centres is one-armed VPN Concentrator mode (which only uses a WAN link):   https://documentation.meraki.com/MX/Deployment_Guides/VPN_Concentrator_Deployment_Guide ... View more