Network Design, Deployment, and SD-WAN Flashcards

What Meraki SD-WAN feature allows real-time measurement of WAN link performance using continuous active probing?

Answer: VPN Registry health checks using ICMP and UDP probes

Meraki SD-WAN continuously sends ICMP and UDP probes over each WAN link to the Meraki cloud servers, measuring latency, jitter, and packet loss in real time for intelligent path selection.

In Meraki network design, what is the function of a 'Concentrator' MX at a data center in an Auto VPN hub-and-spoke topology?

Answer: It terminates all spoke VPN tunnels and provides a routing point for inter-branch and datacenter traffic

An MX acting as a VPN concentrator at the data center terminates Auto VPN tunnels from all spoke sites, providing a routing hub for inter-site traffic and access to centralized resources.

What is a key design consideration when implementing Meraki Auto VPN with multiple hub sites for redundancy?

Answer: Spokes can be configured with primary and secondary hubs; if the primary hub becomes unreachable, traffic fails over to the secondary

Meraki Auto VPN supports primary and secondary hub designation per spoke, allowing automatic VPN failover to the secondary hub if the primary becomes unavailable.

Which Meraki MX feature enforces consistent security policy for remote worker laptops connecting from home without the need for a physical MX at each home?

Answer: Client VPN with Meraki MX as server plus Group Policies applied dynamically via RADIUS

Remote workers connect via Client VPN (or AnyConnect) to the MX; Group Policies returned by the RADIUS authentication server apply consistent firewall rules and segmentation to each user session.

When an organization has both Meraki and non-Meraki devices, how can site-to-site VPN be established with the non-Meraki side?

Answer: Using Non-Meraki VPN peers configured with IKEv1/IKEv2 and PSK or certificate authentication under Site-to-site VPN settings

Meraki MX supports Non-Meraki VPN peer configuration using standard IKEv1/IKEv2 IPsec with pre-shared keys, enabling interoperability with third-party firewalls and routers.

What is the benefit of enabling 'NAT traversal' (NAT-T) in Meraki Auto VPN configurations?

Answer: It allows VPN tunnels to be established even when one or both MX appliances are behind a NAT device

NAT traversal encapsulates IPsec traffic in UDP port 4500, allowing VPN tunnels to pass through NAT devices that would otherwise block ESP protocol packets.