We have a website we use that has a function locked by an IP whitelist at website vendor.

Right now we route their public Ip's over our VPN so it all seems to come from our HQ watchguard firewall.

So we only have one IP to whitelist across multiple sites currently.

When moving to Meraki and AutoVPN with a vmx in Azure we cannot do this.

VPN concentrator mode has no idea of source nat. And routed mode doesn't seem to work with local subnets over the VPN.

Has anyone done this and got it working? So far our reseller says put a routed vmx in front of the current one and use it as a default gateway.

Hoping for a better solution. Maybe some craft network setup in azure?

Edit: this is for remote sites running MX's