I have an MX84 with site to site VPN and Client VPN enabled. Site to site is working without any issues however users utilizing Client VPN are constantly being prompted for their password in MS Outlook.
Client VPN has a subnet 10.59.100.0/24 with our internal Custom Nameservers. The authentication is done with Meraki Cloud.
It happens to different windows operating systems and different MS Outlook versions.
When checking connection Status in MS Outlook I can see all everything is Established under the Status column, then after a couple of minutes Exchange Mail disconnects and I get the password prompt.
It was suggested to verify DNS settings in Client VPN but when testing with nslookup everything resolves fine.
I have faced issues like this in the past as well. What type of server are you using is it exchange or office 365?
I see that you have the custom name servers setup, did you also go into advanced and set your internal DNS suffix? Are there any subnets the client VPN should be able to reach that it is not allowed to yet at this time? If you are using site to site VPN and connecting at one site and exchange is on the other you will need to make sure the client vpn subnet can communicate across the site to site VPN as well. Please let me know
We have a hosted Exchange 2010 at the MX84 location Main subnet 192.168.100.xx
Two remote sites with MX64 each and DHCP runing in the MX. Site to site VPN as I mentioned works without any issues with 192.168.110.xx and 192.168.120.xx Those clients can reach Exchange with no problems, outlook doesn't prompt for a password.
DHCP is not running in the MX84 location where Exchange server lives and where VPN clients are connecting to. Domain Controller has DHCP running.
I don't see an option to add DNS suffix, I guess because DHCO is not running in the MX84?
One of the setbacks I’ve faced with meraki client vpn is that it does not dynamically add local DNS server to the computer. You have to manually add the dns servers on the windows network adapter by going to properties of adapter tcp/ipv4 settings set static DNS and also have to manually add dns suffix under advanced then select dns tab and enter dns suffix at bottom. Hope this helps let me know if you need a more detailed guide and I can allaborate further.
you also have to do the same with Mac and it’s dns settings not sure of its exact options however.