Change IP of VPN on Meraki MX84

[bassmanrod]

Hi.

We are getting a new ISP so; of course, that involves different IPs. I already know how to change the IP/netmask/gateway on WAN1 of the Meraki. I have 5 IPs allocated, if that matters.

How do I go about changing the IP of the VPN server? I looked and couldn't find it.

Thanks in advance

Bassmanrod

[ChrisKemsley · Accepted solution]

The VPN server IP is the WAN IP of the MX

[Nick]

The WAN IP of the VPN server will change to the default IP of the MX. Under Security & SD-WAN > Uplink you will see this.

You can change the subnet handed out in Security & SD-WAN > Client VPN

[BrechtSchamp]

And if you want to avoid having to change this on the clients every time you get a new IP address you can use the dynamic DNS name provided by Meraki for free, instead of using the actual IP.

You can find it in several locations, but one of them is in the appliance status page. It ends with .dynamic-m.com.

[CharlesIsWorkin]

Brecht hit the nail on the head. It's easy to use the dynamic DNS name provided by Meraki and not have to mess with setting a static IP. It's part of what your awfully expensive license is paying for, right? 🙂

Edit: I like Nash's idea too! It really cleans it up from the client's perspective. I didn't think to do that myself yet. Perhaps I'll get around to it sometime. 🙂

[Nick]

Its a good point to raise - I would never consider doing it any other way. Use the dynamic host name!

[Nash]

Count me as another vote to use the dynamic DNS provided by Meraki when configuring profiles on your end user's computers. It's especially good practice if you have multiple WAN links.

Easiest place to grab it is from the Client VPN page - it's the second line down, starts with Hostname.

If you don't want to be using wharrrrgarrbbll.dynamic-m.com, you can setup a CNAME record for vpn.yourdomain.com or whatever, on your public DNS.