Hi,    I am looking for some guidance as to what is reasonable to expect in Azure for VMX merakis in routed mode and in concentrator mode.    I understand that in "Routed mode", you get 2 interfaces ( 1gb wan and 1gb  lan ) at effectively 1 gb each, what is the expected throughput that can be estimated?    In concentrator mode there is a single 1gb interface to the VM that does both the "lan" and "wan", so effectively 500mb in and same out.    Q1)what is the expected/ confirmed throughput to plan based on for each of these configs please ?    Q2) What are the plans / options for scaling up, faster speeds, making faster interfaces for devices to operate in Azure, as there are a number of hosts sending traffic to the merakis, meaning there is more traffic than can be dealt with to reduce the bottleneck of interface speed, in the sane way as in prem interfaces have moved to faster on core switches.     Q3) Mtu & Ipv6, [on or off] I also have seen a number of references to optimal MTU in azure being at 1400 where VPN is used.  In the meraki portal, i see dialogue boxes about ipv6 not being supported over vpn site to site tunnels.    " VPN and MTU If you use VMs that perform encapsulation (like IPsec VPNs), there are some other considerations regarding packet size and MTU. VPNs add more headers to packets. The added headers increase the packet size and require a smaller MSS.   For Azure, we recommend that you set TCP MSS clamping to 1,350 bytes and tunnel interface MTU to 1,400. For more information, see the VPN devices and IPsec/IKE parameters page. "   source: https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-tcpip-performance-tuning?source=recommendations   https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Site_to_Site_VPN_tunnels_to_Azure_VPN_Gateway   https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Troubleshooting   [Point back to Microsoft guide above ]    Q4) Where is the equivalent of the "Cisco Safe blueprint" applied to  Cisco Meraki in Azure please?    q5) More detailed Documentation, I am looking to read / find.    Design guidance:    Multiple meraki's / subscriptions, vnets and routing between them.   Higher throughput hosts, connections between vmx devices, Azure vnets, site to site vpn's    Traffic optimisation and guidance.    Higher speeds, e.g. managing groups of hosts and sustained traffic throughput with meraki    Investigations of Interruptions to traffic forwarding, [ suspected due to convergence when routes update / change & route summarisation /  notification suppression  】   Gathering logging information for investigating issues / setup using log information available in the meraki portal.    Any useful books / articles to read / review, anything you think / suggest ?    Thanks  Stuart    ... View more

Hi All,    What are the ways that you're planning to control traffic after Microsoft turns off Outbound traffic at the end of September 2025.    https://azure.microsoft.com/en-us/updates?id=upgrade-to-standard-sku-public-ip-addresses-in-azure-by...    We have groups of VM's , and are looking at the different options about setup of firewall rule policy management across devices that people are coming up with so can review what can and does go where.     Rules We also have to contend with Microsoft's IP address ranges, and dedication to only providing *.xxx.microsoft.com rather than ranges that can be put into an IPv4 firewall rule base, and without making their spreadsheet of addresses too arduous to manage.    The Microsoft answer of Azure firewall is in the mix, [ which seems to filter their stuff by domain name ] , NSG's however are based on IPv4 or ipV6 addresses.   https://learn.microsoft.com/en-us/defender-cloud-apps/network-requirements?source=recommendations    e.g. Defender https://learn.microsoft.com/en-us/defender-cloud-apps/network-requirements?source=recommendations  cdn.cloudappsecurity.com cdn-discovery.cloudappsecurity.com adaproddiscovery.azureedge.net *.s-microsoft.com *.msecnd.net dev.virtualearth.net flow.microsoft.com static2.sharepointonline.com *.blob.core.windows.net discoveryresources-cdn-prod.cloudappsecurity.com   13.107.219.0/24, 13.107.227.0/24, 13.107.228.0/24, 13.107.229.0/24, 150.171.97.0/24, 13.80.125.22, 40.74.1.235, 40.74.6.204, 40.119.154.72, 51.143.58.207, 52.137.89.147, 52.157.238.58, 52.174.56.180, 52.183.75.62, 20.71.203.39, 137.116.224.49 *.eu.portal.cloudappsecurity.com Office https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worl...    Are you using the service tags download as an allow list ?  https://www.microsoft.com/en-my/download/details.aspx?id=56519&msockid=09ba471708d9606b3b91515f09616...    For multiple vms, different subscriptions, and access rules specific to devices these get more complicated, have you just gone down the proxy route ?     How are you managing the firewall rules / NSG's and the complexity of allowing what is needed What are the ways you're doing changes ?  How are you segregating ?   How are you intending to restrict access outbound ? [ or are you not ]  Proxy ? other firewall options ? Azure Firewall / live with Network Security Groups / virtual ASA /  other ] ? Meraki Firewall Options / alternatives?  Routing traffic through specific control points & load sharing / resilience ?    Is Umbrella required for domain based filtering , is it better to focus on ipv4 rules and keep adding addresses each time they get new ones added in ?    Any suggestions or reading material gratefully received.    Many thanks Stuart ... View more

Cisco VMX-XL  [ 10GB throughput ] Is this generally available in Azure, what is availability, what are the specs and costs ?   Hi all,    I saw this post suggesting that there is a Cisco Meraki VMX-XL available, but also the post seems to show AWS as the thing.   [post's date is 26th May 2025 ]     https://www.stratusinfosystems.com/news/introducing-the-new-meraki-vmx-xl-how-this-works/?srsltid=AfmBOoqpkffk6MLlNddNoLYQiH4MZR0eXadOJjo5zQJdTcRyojmTBTja  It says specs are:  vMX-XL: Up to 10,000 tunnels / 10 Gbps VPN throughput Built for AI, big data, streaming, global SD-WAN, and real-time analytics The vMX-XL goes far beyond traditional use cases. It enables large-scale, high-performance networking for AI-driven applications, hybrid multi-cloud infrastructures, and globally connected users—all managed through the same user-friendly Meraki dashboard. "Deploy the vMX-XL directly from your Meraki Dashboard. Assign your license, select your cloud provider, and go live within minutes"    The Meraki Website link goes to:     https://meraki.cisco.com/products/hybrid-cloud/models/     Hybrid Cloud Solutions | Security SD-WAN | Cisco Meraki     Data sheet only goes up to vMX-L:  https://meraki.cisco.com/wp-content/uploads/2023/05/vMX-datasheet-20230421-english.pdf https://documentation.meraki.com/MX/MX_Sizing_Information/MX_Sizing_Principles#Performance_Data  Name                     Throughput  Meraki vMX-S      [ 200MB ] Meraki vMX-M     [ 500 MB ]  Meraki vMX-L      [ 1 GB ]    but no vMX-XL    [ 10 GB ]  Datasheet Comparison [ dated 19 July 2025 ] https://documentation.meraki.com/MX/MX_Installation_Guides/vMX_Comparison_Datasheet  No vMX-XL listed.   https://documentation.meraki.com/MX/MX_Installation_Guides/vMX_Setup_Guide_for_Microsoft_Azure  https://azure.microsoft.com/en-us/updates?id=upgrade-to-standard-sku-public-ip-addresses-in-azure-by-30-september-2025-basic-sku-will-be-retired Link to Azure article about no Standard Public IP address support after 30th-Sept-2025   What is the process for further investigation of costs, underlying image size in azure, and avialability.  on website LIC-VMX-VAR Meraki vMX Enterprise and Advanced Security Licence - Virtual MX on public cloud environments | Meraki from CloudControlled    Can select a licence for it:     SKU: LIC-VMX-XL-ENT-1Y  Meraki vMX Enterprise License, Extra-Large,1 Year £5,040.78  Original price was: £5,040.78.£3,287.35Current price is: £3,287.35. +VAT (£3,944.82 incl. VAT) What technical docs are there about it to show people please?    Docs don't list it.  https://documentation.meraki.com/MX/MX_Sizing_Information/MX_Sizing_Principles          ... View more