Licensing

[ezervoud]

Hi team,

IHAC with an MX and advanced license at their HQ site

On a remote site they need a new one

The traffic will go through HQ, so I only need s2s

Do I need to purchase the second unity with, say an Enterprise License?

[inderdeepsingh1]

Have a look on the license FAQ

https://documentation.meraki.com/General_Administration/Licensing/Meraki_MX_Security_and_SD-WAN_Licensing

I think the basic license is enterprise license and you should need it. Meraki will not work without license.

[MerakiGnome · Accepted solution]

Hi @ezervoud

You will require an Advanced Security licence for the MX unit at your second site as you can't mix Enterprise and Advanced licences within a single Organisation.

You could create a secondary Org and place the second MX in that and run an Enterprise licence but you'll have to manually create the s2s VPN.

[ezervoud]

Thank you - good point on the manually configuring the s2s VPN

[MerakiGnome]

cost vs functionality/administration overhead. 😁

[GreenMan]

Secure traffic processing really happens on the local MX, where clients are connected - you will get limited protection, if you're relying on just the VPN Hub to (Advanced Security) process the traffic. You most likely need Adv Sec for the Spoke. This is one reason why we simplify everything to the same license level, per Org.