a week ago
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a week ago
Diffie Helman 20 in MX.
We are configuring a VPN with a non Meraki Peer. Te other side works with DH20. MX doesn't support this. A suggestion of another product?
Labels:
- Labels:
-
3rd Party VPN
3 Replies 3
a week ago
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a week ago
As you noticed, MX does not support DH20, so your options are to change the DH on the other side or replace the MX with another firewall, such as a Palo Alto for example.
Another option I see would be to set up a Linux VM on the side with the MX and configure the VPN tunnel on that Linux machine and route through it.
I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.
Please, if this post was useful, leave your kudos and mark it as solved.
Please, if this post was useful, leave your kudos and mark it as solved.
Monday
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Monday
A virtual Cisco ASA. The most common one I used is the ASAv10. Run it behind or beside your MX.
Tuesday
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Tuesday
Either have the other side change their DH parameter to DH14 or have a separate router device do the VPN and just route to it from the MX.

Get notified when there are additional replies to this discussion.