Meraki Security Appliances for Remote Teleworkers (MX80 and Z1)
I have been really impressed with this kit over the last couple of days that i have been configuring it. It might not be the solution in place for Educational establishments but anybody here in Industry with teleworkers I advise you to take a look.
I am using the MX80 purely as an VPN appliance (can be a VM too) and not for a firewall. I have the Internet Interface configured on an Static public address and the internal interface configured with a Static address on the LAN (configured by the cloud controller). Setup the internal subnet in the cloud controller, setup the type of tunnel required (Full or Split). The Meraki units also have a Wan optimization built in.
Create site for Z1 Appliance and configure a subnet lan for the VPN along with the relevant tunnel options and SSID (for Z1's built in wireless). As in this scenario
the MX80 is not the default gateway I have had to set static routes on the firewall to direct any traffic for the remote sites to the MX80.
Take Z1 home plugin and it auto connects you can a 4 port switch and wireless access point on your local Lan.