Site to Site (meraki) Hub (Mesh) Establish VPN tunnels with all hubs and dependent spokes. Exit hubs This option is only available if the MX-Z device is configured as a Hub. This option lets you designate the remote MX-Z device that is to receive all network traffic from the local MX-Z device. This creates a Full Tunnel configuration where all traffic destined for a default route is sent to the specified MX. d. (Optional) If another MX in the organization is also configured as a hub, it can be added as an Exit hub. If configured, all VPN client traffic to this MX will be tunneled to the specified exit hub.

Today we will setup a client to site IPsec VPN with TZ-470 vs StrongSwan, which will be configured with PreShared key Authentication. After our tunnels are established, we will be able to reach the private clients over the VPN tunnels. Network Diagram Configure TZ-470 We will setup IPsec VPN through Sonicwall GUI. We will use the following settings for Phase 1 and Phase 2:

1. Topology 2. Enable Shaper on OPNsense Test Case1: When want to set upload 10M and download 20M bandwidth. a. Add two bandwidth on pipes, one for 10M bandwidth another for 20M bandwidth. Edit Pipe (10M) Option

Today we will setup a site to site IPsec VPN with TZ-470 vs OPNsense, which will be configured with PreShared key Authentication. After our tunnels are established, we will be able to reach the private clients over the VPN tunnels. Network Diagram Configure OPNsense We will setup IPsec VPN through OPNsense GUI. IPsec VPN Tunnel Settings