i believe the primary advantage of hub-spoke model is it decreases the overhead on the branch MX's.  In a full mesh setup, you end up creating a lot of tunnels which at scale has a performance impact. The number of tunnels grows incredibly quickly with additional branches and/or WAN connections. The advantage of hub-spoke is that the branches will only ever have tunnels to the hub, thereby vastly decreasing the number of required tunnels.   This doc has some good details about it. https://documentation.meraki.com/Architectures_and_Best_Practices/Auto_VPN_Hub_Deployment_Recommendations ... View more

I'll use the topology below, thank you! ... View more

I'll try one more time using the method you suggested. Thank you for your response. ... View more

Correct.  This is mostly invisible.   I run into occasionally when using RADIUS, and you see RADIUS client requests coming from this range when they hit the RADIUS server (under very specific use cases). ... View more

It's a shame that outgoing packets from the LAN are captured, but SITE-TO-SITE VPN packets are not. ... View more

Thank you so much for your response.!! ... View more

Thank you for your response!! ... View more