VPN between palo alto and Meraki with dynamic WAN ip address

msdphi — Fri, 18 Jul 2025 17:12:56 GMT

Hello Mams and Sirs...

I am stuck in a unique issue.

Meraki has 2 WANs - primary one is static and secondary one is dynamic.

They have 4 Lan subnets.

The initial plan was to use their FQDN as remote peer and they would take care of the VPN failover.

But, in ikev2, we could reach only one of their 4 subnets.

When I switched to ikev1, I could reach all the 4 subnets.

Now, the issue is, I cannot use fqdn if I am using ikev1. Meraki's limitation, I reckon.

Can you help me find a way to configure tunnels to both the WANs and configure VPN failover? I am using policy based VPN with PBF rules.

topic VPN between palo alto and Meraki with dynamic WAN ip address in Panorama Discussions