thank you very much for looking into this, much appreciated! unfortunately, our scenario is very specific to the AWS Transit Gateway. We dont have the hardware ourselves and we are asking a vendor to PoC it. We think BGP wont work, even with the updated firmware, but as a workaround we can static route a supernet so we don't feel that is a show stopper. The tunnel successfully establishes using static routing and a summarized CIDR, as confirmed by IKE Phase 1 and 2 logs. That said, those logs only show that the control plane is up—they don’t confirm actual traffic is passing. Dynamic Routing via Transit Gateway – Not successful: cannot see the routes in the route table on either side, and BGP status on the Meraki is either in openSent or Established peer status
... View more