cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How get Client VPN Meraki work over Proxy Port 8080

Comes here often

How get Client VPN Meraki work over Proxy Port 8080

Hello Meraki Team

 

1) 2 weeks ago I managed to config the Client VPN to my Meraki Home Network - MX64 on Win10 and Android and this allowed me to connect remotely via RDP to my home Laptop (as tmv and anydesk were blocked on that site)

 

2) However we have moved to other site on same Company where navigation is via proxy http 8080 and Meraki VPN Client-Site Win10 config don't work with that proxy. Only after much searching over google I found vpnbook.com that at least allowed me to connect via tmv/anydesk using openvpn

 

3) ¿Do you know if there is a way to get Meraki VPN Client-Site to pass through that proxy? (Maybe fine-tuning some config or creating a specific 3rd Party VPN Client Profile, as vpnbook.com/openvpn on their US/EU profiles are slow sometimes and neither Meraki VPN Client-Site work through this)

 

Regards

4 REPLIES 4
Kind of a big deal

Re: How get Client VPN Meraki work over Proxy Port 8080

Since it's an IPSEC VPN, the client VPN needs ports 500 and 4500 to work. 

 

Is it possible for your company to allow those ports for the MX? Preferentially, they'd exempt the MX's IP from the web proxy entirely.

Comes here often

Re: How get Client VPN Meraki work over Proxy Port 8080

Hello Nash, thanks for your quick answer

 

  1. Unfortunately here its very hard to get Sec Ops Admins to allow policies to be created on their FW to pass any traffic beyond their current config (I know all tweaks and OKs that are needed for that, and only remains what I can do for myself on user's side...)
  2. For this I go to you as I think should be a way to tunnel Meraki VPN inside another (I'm not a Sec Specialist but if vpnbook.com could via OpenVPN pass tmv/anydesk/gdrive traffic, could not be a way to do the same with Meraki IPSec traffic?)

 

Regards

Kind of a big deal

Re: How get Client VPN Meraki work over Proxy Port 8080

OpenVPN is an SSL VPN that by default uses port 443/https. That's an entirely separate kind of VPN with its own protocols and setup.

 

The Meraki client VPN is an IPSEC VPN, which means it's expecting to use 500/4500. That really can't be changed.

 

If you need to use the Meraki client VPN, I think you're going to have to argue with sec ops. 

Head in the Cloud

Re: How get Client VPN Meraki work over Proxy Port 8080

You might try a DNS based VPN like Psiphon then use the Meraki Client VPN

https://www.psiphon3.com/en/index.html

 

Another option would be to Change the RDP port or port forward on your MX on an allowed port out your existing site.

 

Last option ditch RDP and use a remote control option that uses https like TeamViewer or LogMeIn

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.