Client VPN Firewall Ports

[rafaelertel]

Hey All,

I won't feel bad if you flame me with a RTFM, but does anyone know off hand which ports one would have to open on a firewall sitting in front of a Hub MX to let Meraki ClientVPN traffic (L2TP/IPSEC) through to said Hub?

UDP 500, UDP 4500, ESP 50, AH 51...? anything else, or not one of these?

Thanks,

rif

[DarrenOC]

UDP 500 and 4500

[DarrenOC · Accepted solution]

TShoot doc

https://documentation.meraki.com/MX/Client_VPN/Troubleshooting_Client_VPN#Resolving_NetBIOS_names_ov...

[rafaelertel]

Thanks man now i'll RTFM 😉

rif

[DarrenOC]

🤣😂 no worries @rafaelertel . Enjoy, it’s an excellent read

[cvwordragen]

Today I had the same issue.

Port Forwarding UDP 500 and UDP 4500 to the inside LAN-adres of the hub will do.

Advise: test your Client VPN with a iPad or iPhone. This worked for me, immediately.

With the Apple clients you will see UDP 500 and UDP 4500 is okay.

MS Windows has problems with NAT-T (NAT Traversal) for ages.