Client VPN

[Rm000]

Can both uplinks be used to establish client vpn?

I have MX250 with both uplinks active; i have been using the public IPs to establish client VPN; i have noticed i can only use WAN 1 to establish vpn but not with WAN 2. I want any of my public ips to establish vpn at anytime i wish, how do i achieve this without having to use the hostname?

Also why can't i use WAN 2 for client vpn?

[ConnorL]

Greetings!

Only one uplink can be used for Client VPN, the MX will only respond on the Primary uplink you've configured under Security & SD-WAN > SD-WAN & Traffic Shaping.

Kind regards,

--

Connor Loughlin
Network Support Engineer

.:|:.:|:. Cisco Meraki EMEAR 🇬🇧

For reference, many questions can be easily answered by searching our online documentation: http://documentation.meraki.com

[Rm000]

Greetings Connor,

Thank you for the reply.

That means each time the primary uplink fails we have to change settings to the next uplink?

[ConnorL · Accepted solution]

You can just use the dynamic hostname, that way whenever the WAN fails it'll be updated to whichever WAN is active. Depending on which DNS server the actual client uses, this is pretty speedy. 

You can see the DDNS name we assigned to your MX by going to Security & SD-WAN > Client VPN. If you don't see this option, go to Security & SD-WAN > Appliance Status and click "Configure Dynamic DNS" on the left hand side

Kind regards,

--

Connor Loughlin
Network Support Engineer

.:|:.:|:. Cisco Meraki EMEAR 🇬🇧

For reference, many questions can be easily answered by searching our online documentation: http://documentation.meraki.com

[Rm000]

Thanks