Client VPN Guidance / Routing

Nathan91
New here

Client VPN Guidance / Routing

Hi,

We have a layer 3 non meraki gateway on our LAN network on the range 10.232.86.0/26 as well as our main subnet 192.168.6.0/24

The gateway address is 10.232.86.1 and our server address for this range is 10.232.86.22

We need to connect a laptop remotely into our network via Client VPN so that it is in the same range / can ping these two address. Basically when the device connects it needs to be able to send network traffic through this gateway.

The ClientVPN range used was 172.40.100.0/24 however there are no routes to the 10.232.86.0/26 range in the route table. I also used the 10.232.86.0/26 range for our Client VPN but still no routes in routing table.

I can't ping this range or IP 10.232.86.1 from our MX appliance

I setup a second MX appliance (on a second broadband link) on the same LAN yesterday. I put the mx ip on the same range as 10.232.86.0/26 and I could ping the gateway 10.232.86.1 from the appliance. However when I connected to the Client VPN 172.40.100.0/24 it didn't know how to talk to 10.232.86.1 or any ip addresses in the range. I couldn’t put the Client VPN range on the 10.232.86.0/26 range as it was already used for the mx appliance ip.

Currently devices on the LAN are dual ip addressed on windows so they have a 192.168.6.0 range as well as a secondary ip on the nic with 10.232.86.0/26 range with static routes on windows to direct the traffic for the 10.232.86.0/26 range out the gateway 10.232.86.1

So basically the switch is doing all the layer 2 work and everything knows to go to the correct gateways.

 

Can anyone please advise and provide some guidance?

 

 

Also note: We don’t have control of this 10.232.86.1 router so any time we need a route added we need to log a call with the ISP.

1 Reply 1
PhilipDAth
Kind of a big deal
Kind of a big deal

You need a unique subnet for client VPN.  It can not use part of your LAN range.  You'll need to ask the ISP to add a static route for that client subnet to go via the MX.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels