Non-Meraki VPN peer connection

[Mauricio-Pacman]

I am trying to establish a Non-Meraki VPN peer connection, phase 1 of the connection works fine according to the other device, but phase 2 does not make a connection, for the vpn they register a private network segment of our mx, I ask, in the vpn configuration where it is configured that this segment would be the one that would connect or if the meraki automatically takes the vpn addressing site to site that has the mx configured?

[KH]

Hey Mauricio,

The subnets the MX advertises to the peer have to be configured as Enabled in VPN under the addressing & VLANs page. Alternatively, this can be done on the Site-to-Site VPN page, the subnets you want advertised to the peer have to be selected as enabled. Problems at phase 2 are usually due to mismatched subnets so ensure that what is configured on the MX is expected by the peer and what is configured by the peer is expected by the MX (Subnets/Parameters). If you continue having trouble I would recommend opening a support case as they would have further visibility with your configuration as well as being able to view verbose logging to determine what the reason for phase 2 failing is.

Regards,

KH