An alternative to a VPN is to employ a Tempered Airwall zero-trust architecture for remote user and security management.
Configure the VPN appliance as per the steps in the Cisco Meraki MX Security Appliance Appendix. Configuration values such as the subnet mask and default gateway can be found in the unique Installation Sheet provided by the Remote Operations Center or Customer Success team.
Connect the VPN appliance with an Ethernet cable to the BAS aggregation switch port specified in the Installation Sheet.
For additional information on zero-trust and zero-trust architecture, refer to the OpenBlue Enterprise Manager Cybersecurity Guide (LIT-12014119).