User Visibility on MX

[Naresh Karthick S]

Hi,

We are planning to configure Core switch as user VLAN gateway and creating transit VLAN between MX and MS switch.

I want to know, if we configure like this, is it possible to get the L7 user traffic visibility in MX.

[martin-lystad]

Yes.

Also, use the unique client identifier options when selecting client tracking.

https://documentation.meraki.com/MX/Monitoring_and_Reporting/Client-Tracking_Options

[Philip D'Ath]

On a different issue, note that you can't use per-device group policies that contain MX options (like firewall rules). Such group policies can only be used when the clients use the MX as their default gateway.

[Naresh Karthick S]

customer is using site2site VPN , will it also affect? if the gateway is changed to Core switch

[Philip D'Ath]

Site to site VPN will work fine.

[Naresh Karthick S]

Ok, thanks for the info.