Hello first time poster been lurking.   I have read the documentation for creating a DMZ and it s fairly simple but the document goes into ACL and other items  I will not be doing.    My setup is such, MX100 at the HQ runs everything. Behind that is a mx65 that we use in the lab. This had been working flawless until we move one of our applications to the vendors cloud that require a non meraki vpn. We have several sites around out state that are spokes to the MX100. We use the autovpn a ton. All of the sites connect to the non meraki vpn just fine. Except the lab (this also setup to be a spoke) because it uses the same public ip that the mx100 uses to connect  the HQ to the vendor. It caused a double vpn to the vendor and it just caused issues.    Someone mention to use a free port on the mx100 create the dmz vlan and plug it in. Since its a spoke it should connect to the autovpn and it should be able to connect to the non meraki vpn.  Is it as simple as the above?   Thank you ... View more