How to connect remotely to a Cisco Meraki Network

[Roey1984]

Hello

We have a small branch in the US that we deployed the following:

SD-WAN  -  MX67  

Switch - MS120

AP - MR44

Users need to connect to their workstation in the office from a remote location.

Is Cisco Meraki Any Connect the only option?; their license is pretty expensive, and we need 10-15 users at max.

What is the best practice to implement the product that meets our needs, please?

Thank you!

[Brash]

Meraki offers a free inbuilt client VPN using L2TP.

It's not as stable or feature rich as Anyconnect but may suit your purposes

https://documentation.meraki.com/MX/Client_VPN/Client_VPN_OS_Configuration

[Roey1984]

Amazing!

And guide to what I need to configure in Meraki Dashboard?

I guess I would need to create users  in order to have my employees authenticate to the MX, right?

[Brash]

This doc has the steps to enable it in the dashboard.

https://documentation.meraki.com/MX/Client_VPN/Client_VPN_Overview

There's multiple ways to configure auth including Meraki Dashboard users or RADIUS.

[Roey1984]

Thank you very much!

[Roey1984]

I`m still unable to connect (Getting error 789)

The MX is reachable from outside (via PING) to its Host name 

But It seems that all is configured ok.. (added the error I see in Event Viewer also

Where do I need to type the "Shared secret" ?

[alemabrahao]

Check it out:  https://documentation.meraki.com/MX/Client_VPN/Guided_Client_VPN_Troubleshooting#Windows_Error_789

[Brash · Accepted solution]

The shared secret in Meraki Dashboard and the pre-shared key in windows client config need to match for the VPN connection to establish 

[PhilipDAth]

And this is the reason why people pay for Cisco AnyConnect and consider it cheap ... because of the effort to get the "free" Microsoft option going.

You can use this client VPN wizard to create a powershell script for rolling out the Microsoft VPN to your clients.  When you use powershell you get a consistent setup experience.  It's the same everytime you run it on a machine.

https://www.ifm.net.nz/cookbooks/meraki-client-vpn.html