CLIENT VPN not working.

[Marcel_Smal]

Good day Community,

I need help with something. 

Here is my design:

Now I am trying to get a vpn connection from the internet to the Client VPN however I am not seeing any of this traffic. I setup port forwarding but still cant see anything.

Can someone please help me out!

[alemabrahao]

Are you using the L2TP connection or Anyconnect?

Is your MX's WAN configured with a public IP or is it behind a NAT (Private IP)?

If it is an L2TP connection and the WAN is configured with a private IP (NAT) or even CGNAT, the Client VPN will not work.

[alemabrahao]

Upstream NAT/Firewall Issue on the MX
If your MX is behind a NAT device (for example, an upstream router or ISP modem), the MX uplink IP might have a private IP in the 172.16.X.X or 192.168.X.X or 10.X.X.X subnet range. Ensure UDP traffic on ports 500 and 4500 is being forwarded to the private uplink IP address of the MX.

Unable to Connect to Client VPN from All Devices - Cisco Meraki

[Marcel_Smal]

Hi Alemabrahao,

Yes the 2MX CLUSTERS is behind a upstream router.

Now I have configured the following on the cisco router before posting on here for support:

ip nat inside source static udp X.X.99.66 (PRIVATE IP OF MX) 500 (PUBLIC IP) extendable

ip nat inside source static udp X.X.99.66 (PRIVATE IP OF MX) 4500 (PUBLIC IP) 4500 extendable
ip nat inside source static tcp X.X.99.66 (PRIVATE IP OF MX) 1701 (PUBLIC IP) 1701 extendable

But still it seems not to work?

[alemabrahao · Accepted solution]

The only thing I can suggest is that you do the troubleshooting.

Check the error code on the client system.

https://documentation.meraki.com/MX/Client_VPN/Guided_Client_VPN_Troubleshooting/Unable_to_Connect_t...

[ww]

Do you test from the internet side. Or from a client on the lan side of that mx

[Marcel_Smal]

Hi there ww,

I am at home and trying to make a vpn connection from my laptop to the the Client VPN that I configured on the MX cluster.

[PhilipDAth]

Are there any ACLs on the routers which might not be allowing the traffic?

[Marcel_Smal]

This was a issue with my windows laptop and not with the VPN. I had to add a registry entry to my laptop for this to work! I am glad that is now working.

https://www.systweak.com/blogs/fix-vpn-809-error-on-windows/