Meraki FW site to site VPN

[Mike05]

Hi,

I'm newbie using Meraki.

Just want to ask if it's possible for 2 Meraki FW both behind NAT (or using private IPs) to connect using site to site VPN?

Both FWs is under one account/organization.

Hope someone can answer.

Thanks in advance.

Mike

[PhilipDAth]

Yes.

https://documentation.meraki.com/MX/Site-to-site_VPN/Meraki_Auto_VPN 

[Mike05]

Hi @PhilipDAth ,

Thank you very much for the quick response.

Will this work only if two MX is under same account?

Im just curious how it tunnels 2 sites even on both private IP addresses. Or it builds through Meraki cloud itself thats why it's possible for this scenario.

Regards,

Mike

[cmr]

@Mike05 if both MXs in the same organisation appear on the internet as the same public IP address and their private WAN IP addresses can route to each other then they will connect using the private IP addressing.

[DarrenOC]

Hi @Mike05 , if under the same Org then yes you should be able to use the Meraki Auto VPN functionality to set up your site to site VPN.  And yes, the magic happens in the Meraki cloud

if they were in different Orgs then you would have to configure the VPNs statically on each dashboard.

[KarstenI]

---

@DarrenOC wrote:

And yes, the magic happens in the Meraki cloud

Just to make sure the OP doesn't get it wrong ... The magic (the coordination of the VPN) happens in the cloud. It's not the traffic that is sent through the cloud.