Meraki MX VPN use IPSEC tunnel mode or transport mode?

[SopheakMang]

Dear Expert ,

i want to make sure that when Meraki MX peer VPN with each other , they use IPSEC tunnel mode or IPSEC transport mode , Because i want to know if the actual source and destination ip will be encrypted or not , or just encrypt only payload.

Please help answer this question 😊

[CptnCrnch · Accepted solution]

Tunnel mode

[SopheakMang]

Hi @CptnCrnch ,

So that's mean MX will encrypt the actual source and destination ip ?
and will use another ip header to transmit the traffic ?

[PhilipDAth]

http://www.firewall.cx/networking-topics/protocols/870-ipsec-modes.html 

[SopheakMang]

Thanks all expert

[GIdenJoe]

Non Meraki VPNs use ESP tunnel mode encap.
However Meraki VPNs encrypt their packet directly under UDP.
Screenshot below, mind that 10.10.10.x is the actual WAN IP of the MX but it's behind a NAT.