cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Client VPN

Comes here often

Client VPN

Hi,

 

Im running a brand new MX65.  Ive gone ahead and configured the Client VPN on the Meraki and a Local Client.

 

The Meraki is on 192.168.128.0/24

My Local Subnet is on 192.168.1.1/24

 

Im able to successfully connect to the VPN and browse the internet through the MX, but I cannot access local resources on the 192.168.1.1/24 subnet.  I tried creating a static route, but it complained about overlap.  ("

  • Static lan route subnets cannot be contained by (or be equal to) a client VPN subnet.")

Ive tried disabling IPv6 on the client device and verified theres no split tunneling.

 

Am I missing something?  

7 REPLIES 7
Kind of a big deal

Re: Client VPN

When you VPN in can you ping your devices via IP address?

 

A common issue is people don't have a name resolution system in place to convert device names to IP addresses.

Comes here often

Re: Client VPN

Nope, I actually tried by IP first.  In addition, none of these devices have any sort of firewall or network restrictions.

 

I feel like Im missing something.

Kind of a big deal

Re: Client VPN

Two questions:

 

  • The default gateway of the devices you're trying to ping is the MX?
  • You say the devices don't have a firewall, are you sure? The built-in windows firewall blocks responding to ping (icmpv4 echo requests) to subnets outside the local subnet.
Comes here often

Re: Client VPN

No, the default gateway is on another subnet.

 

And yes, I am absolutely sure, these are network appliances Im trying to connect to.

Kind of a big deal

Re: Client VPN


@BobSaget88 wrote:

No, the default gateway is on another subnet.


I'm afraid that's not possible, a default gateway is always on the same subnet as the device itself. So it's either the MX or some other router on the subnet, depending on your architecture.

Comes here often

Re: Client VPN

Please see my first post with the subnet info.  Each subnet has its own default gw.  The MX is on one subnet and the devices Im connecting to are on a different one.  Each subnet has its own gw.

Kind of a big deal

Re: Client VPN


@BobSaget88 wrote:

"but I cannot access local resources on the 192.168.1.1/24 subnet"


I'll try to put my question differently. What is the default gateway of those resources. Is it the MX (to which you're building the tunnel)?

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.