Using Windows server as VPN server with L2TP behind MX

[HaniAbuelkhair4]

Hi,

Trying to use Windows server as VPN server using L2TP protocol behind MX 

I know that L2TP VPN will need 

DP 1701 —
UDP 500
UDP 4500 NAT-T 
Protocol 50 ESP

As the Windows server behind the MX NAT devise and the windows server dose not have public IP 

I was readding about this and its fact that port forward will not help for the ESP protocol and i should use NAT-T instead 

So i think i need to change the registry on the Windows server to allow NAT-T, and then end user machine registry to allow NAT-T but do i need to do any thing from the MX to allow NAT-T maybe one to one NAT but this will need an extra public IP 

Any ideas if someone have same setup ?

Thanks

[Brash · Accepted solution]

NAT-T needs to be configured on the endpoints (client and server). The MX just needs appropriate port forwarding (see below link).

https://documentation.meraki.com/MX/Other_Topics/Using_VPN_through_an_MX_Security_Appliance

[HaniAbuelkhair4]

@Brash Thanks 

Just want to confirm that