r/meraki

Providing guest wifi to an indoor track at a gym.

APs all around the perimeter, signal coverage is excellent.

Have the SSID setup as a bridged VLAN with Layer 3 roaming enabled (and isolated to its own guest network subnet obviously)

The Layer 3 roaming test is successful, but users are reporting as they walk around the track listening to streaming audio it disconnects and reconnects on them.

Wondering what else I can check

This document is very helpful https://aws-quickstart.github.io/quickstart-cisco-meraki-sd-wan-vmx/ however our AWS architecture is slightly different.

We already use a TGW as the transit hub and a third-party firewall for traffic inspection. All inbound and outbound internet traffic passes through the firewall before reaching the TGW and workload VPCs.

We are considering deploying the vMX behind the firewall in concentrator mode, with the firewall handling NAT.

Has anyone run a vMX behind a third party firewall?

1. Can the vMX operate correctly when the Meraki Dashboard sees the firewall's public IP?
2. Will HA/failover still work when the vMX is behind the firewall
3. Any limitations with this design?