Hi Adam, Regarding the issue of natting public IPs in the tunnel.  I have a non-Meraki vendor who will not allow a private IP address for the encryption domain.  This is a one-way tunnel with the vendor sending files to our host. With our existing ASAs we can NAT public IPs inside the tunnel, no problem.  Is this possible with the Meraki MX250? Thanks, Eric ... View more