Non Meraki Peer Recommendation

[endrianusgohan]

Hi, 

I'm looking for non meraki peer recommendation which can connect fluently through IPSEC site to site. Are there any recommendations ? 

I've tried Cisco RV, Grandstream, Sophos, Sangfor, but had problem with the connection. Most of them got hang up and had local problem connectivity. 

Thanks a lot.

[Inderdeep]

@endrianusgohan : Did you check this 

https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior

[KarstenI]

I have a couple of VPNs running between MX and Cisco ASA. Works like a charm.

[Inderdeep · Accepted solution]

Check with Cisco ASA or Fortinet. It’s working 

[CptnCrnch]

ASA is my typical go-to platform when it comes to S2S VPN because it handles almost everything flawlessly.

[endrianusgohan]

Hi @Inderdeep ,

Have you tried the fortigate branch especially branch 40F ? 

Or what model have you tried from fortinet products ? 

[Inderdeep]

@endrianusgohan : Check this out 

https://freddejonge.nl/fortinet-to-meraki-site-2-site-vpn/

[endrianusgohan]

is there any other vendor that do not require licenses to operate ? 

[Inderdeep]

@endrianusgohan : I dont think any vendor without the licensing model may be @RestaurantGuy is telling when the license expires and you will get the grace period but that is always a risk. I would not recommend that approach. 

[RestaurantGuy]

I've ran a Watchguard XTM-26 to an MX device for several years.  The XTM is now likely a model T15.  Several tech notes out there on how to set it up.

The WG devices come with a license when purchased but the device does not shut down when it expires, so you can keep using it.  Makes a decent VPN endpoint, although I'd likely go Z3 with a long license assuming this is for a small office, partner company or individual.

[PhilipDAth]

Cisco ISR1111-8P

Strongswan on Ubuntu,