cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

NAT Unfriendly

SOLVED
Conversationalist

NAT Unfriendly

Hello, 

 

I am receiving the NAT unfriendly alert on my VPN status page. Does this alert can cause the VPN not going up?

 

Regards

1 ACCEPTED SOLUTION

Accepted Solutions
Kind of a big deal

Re: NAT Unfriendly

Yes it could.

 

It means there is something doing NAT in front of the MX.  You could try upgrading the firmware of whatever that device is to resolve the problem.  There is also a troubleshooting guide here:

https://documentation.meraki.com/MX/Site-to-site_VPN/Troubleshooting_Automatic_NAT_Traversal_for_Mer...

 

You could also manually forward a UDP port on that upstream router to the MX and configure the MX to use manual NAT traversal.

https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Settings#NAT_Traversal

2 REPLIES 2
Kind of a big deal

Re: NAT Unfriendly

Yes it could.

 

It means there is something doing NAT in front of the MX.  You could try upgrading the firmware of whatever that device is to resolve the problem.  There is also a troubleshooting guide here:

https://documentation.meraki.com/MX/Site-to-site_VPN/Troubleshooting_Automatic_NAT_Traversal_for_Mer...

 

You could also manually forward a UDP port on that upstream router to the MX and configure the MX to use manual NAT traversal.

https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Settings#NAT_Traversal

Kind of a big deal

Re: NAT Unfriendly

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.