Cisco EZ VPN alternative

[kima25]

Hello,

I'm working on a project for a customer who has ASA firewalls at headquarters and remote sites with Internet access. 

The sites don't have a fixed public IP address can't set up IPsec with the firewalls at headquarters, so he's using the proprietary Cisco EZ VPN protocol (which is enf of life). 

my question is, if we propose a sdwan meraki solution, can we set up VPN tunnels even if we don't have fixed IP addresses on the remote sites?

thanks for your help 

[alemabrahao]

When you are talking about fixed IP, are you talking about public IP alright?

Yes you can.

[kima25]

hello @alemabrahao : yes right 

[FabianSchleef · Accepted solution]

Hi Kima,

all MX devices will connect to the Meraki Auto VPN Registry with their current Public IP address. The Registry will provide these information to all MXs in your organization also connecting to it. So yes, dynamic WAN IP addresses are not an issue.

https://documentation.meraki.com/MX/Site-to-site_VPN/Meraki_Auto_VPN_-_Configuration_and_Troubleshoo...

[kima25]

Hi @FabianSchleef ,  thank you for your response 🙂