Hi,   I was able to ping a public IP like 8.8.8.8 and now I see that the route table shows all links as good including the IPSec peer. But what I'm unable to understand is how does the appliance know which link to pick to route the ICMP traffic designated to 8.8.8.8 - would that be the WAN uplink or the VPN link. Both those links have a default subnet 0.0.0.0/0 configured and both have the link status to be good.    Any help here is very much appreciated!    Thanks. ... View more

I don't know the answer.   I would expect it to be the IP address directly configured on the WAN port that is being used to build the VPN. ... View more

Thanks! Coincidently I happened to find this too soon after I posted this query 🙂  ... View more

Thanks for that! Will check it.  ... View more

  "ipsecPoliciesPreset": "zscaler"     This is valid. I don't see a localId param, though. ... View more

The documentation does not mention anything about the local ID and how that is handled if it is not provided in the configuration. Hence wanted to know what the behaviour would be or specifically if there is any implicit use of IPv4 address by MX devices when establishing VPN connectivity to third party peers.  ... View more

Hi,   As I understand from the documentation, the availability tags are associated to a given network comprising of many appliances. If we were to configure Non Meraki VPN to a third party firewall service such as zscalar, is there a way we can associate the VPN configuration with just one of the appliance in the network associated with a specified tag?  ... View more