cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Meraki Site to Site VPN Issue

SOLVED
Here to help

Meraki Site to Site VPN Issue

Hi guys,

I'd like to check whether this diagram is possible or not.

I think it is not working well.

 

20191118_140840.jpg

 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Kind of a big deal

Re: Meraki Site to Site VPN Issue

Yes, plenty of people have their MX behind another device. As long as the device behaves as Meraki puts it "NAT-friendly" you will be fine.

 

If it behaves NAT-unfriendly, the dashboard will let you know. Solutions for that issue are described here:

https://documentation.meraki.com/MX/Site-to-site_VPN/Troubleshooting_VPN_Registration_for_Meraki_Aut...

View solution in original post

9 REPLIES 9
Highlighted
Kind of a big deal

Re: Meraki Site to Site VPN Issue

What makes you think it wouldn't work? Seems like a standard setup for AutoVPN?

Highlighted
Here to help

Re: Meraki Site to Site VPN Issue

Thank you,

 

Yes, I mean that AutoVPN.

Is this diagram working for Auto VPN correctly ?

 

Highlighted
Kind of a big deal

Re: Meraki Site to Site VPN Issue

That's a standard setup for AutoVPN, so it should work yes.

Highlighted
Here to help

Re: Meraki Site to Site VPN Issue

Thank you for your answer.

 

In case of standard, wan interface of MX has public IP, not private IP.

In this case, wan interface of MX has private IP.

Although wan interface of MX has private IP, AutoVPN can work, right ?

 

Thank you,

 

Highlighted
Kind of a big deal

Re: Meraki Site to Site VPN Issue

Yes, plenty of people have their MX behind another device. As long as the device behaves as Meraki puts it "NAT-friendly" you will be fine.

 

If it behaves NAT-unfriendly, the dashboard will let you know. Solutions for that issue are described here:

https://documentation.meraki.com/MX/Site-to-site_VPN/Troubleshooting_VPN_Registration_for_Meraki_Aut...

View solution in original post

Highlighted
Here to help

Re: Meraki Site to Site VPN Issue

Thank you for your guide.

 

In this case, the router front of MX can support nat.

So MX can connect AutoVPN, right ?

 

If I use MS250 instead of the router, MX can't connect AutoVPN. Because Meraki MS can't support nat.

 

Is this my understanding correct ?

 

Highlighted
Kind of a big deal

Re: Meraki Site to Site VPN Issue

Indeed, you can't do NAT with an MS switch.

Highlighted
Here to help

Re: Meraki Site to Site VPN Issue

Thank you for your answer.

I think this is NAT problem not private IP.

Although wan interface of MX has private IP, It can use AutoVPN in case of the front device of MX can support NAT.

 

Thank you.

I understand.

 

Highlighted
A model citizen

Re: Meraki Site to Site VPN Issue

Obviously it will work down under!
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.