Unfortunately the NAT limitation is being forced by the other end of the site-to-site VPN. I put in a ticket and got the function enabled, but was informed that since the other end is a Palo Alto Firewall the Meraki system doesn't support it. I'm currently looking for a workaround but may have to use another firewall for this specific tunnel. ... View more