VPN Client Meraki MX - Laptop W10 Mistake

[Carlos1]

Hi team, I'm reaching out for your expertise. I'm having an issue with the Meraki VPN client.

We have two MX64 <-MS <- MR connected to Windows 10 laptops. We configured it according to Meraki's guides, but it's displaying the following message:

The strange thing is that we've also configured it on macOS, and it works perfectly; the connection is successful.

I see some posts indicating that it's due to a Windows update, but those posts are three years old 2022-2023. I don't know if anyone is still experiencing this problem in 2026.

Regards

[KarstenI]

First: Try the script from @PhilipDAth 

https://www.ifm.net.nz/cookbooks/meraki-client-vpn.html

And even better, get some Cisco Secure Client Licenses and use AnyConnect. That is much better and more powerful.

[Carlos1]

I tried using the provided script, but the problem persists.

I configured it with AnyConnect, but the problem remains.

[alemabrahao]

what is the error code?


https://documentation.meraki.com/SASE_and_SD-WAN/MX/Troubleshooting_and_Support/Troubleshooting/Trou...

[Carlos1]

This is Error in log dashboard Meraki with AnyConnect

[alemabrahao]

You need to check the Windows logs in the Windows Event Viewer.
Take a look at the link I sent you.

These logs are related to AnyConnect, and from what I see, you're using the native Windows client with L2TP. Therefore, this log doesn't make any sense.

[Carlos1]

this error 789

Adapter VPN-Test (spanish) - is correct?

[alemabrahao]

Change the option highlighted in red to not require a cryptography, set as optional.

[Carlos1]

the problem persists

[alemabrahao]

IKE and AuthIP IPsec keying modules disabled

This might occur if third-party VPN software has been installed and disables the IKEEXT service. To reenable the service:

1. On the affected device, press the Windows key and type Control Panel
2. From the search results, click on Control Panel
3. Navigate to Administrative Tools > Services
4.  Find the service named "IKE and AuthIP IPsec Keying Modules" and double-click to open
5. Select Automatic from the Startup type drop-down menu

 If the service automatically reverts to Disabled, or fails to start, remove the third-party VPN software.

[alemabrahao]

Just one question: are you performing this test on the same network where the MX is installed, or on a remote network (like in your home, for example)?

If you're on the local network where the MX is installed, this won't work.

[Carlos1]

I am doing the tests at another location

[Carlos1]

The IPsec service isn't showing up for me =O

How do I make those IPsec services appear?

[alemabrahao]

I don't speak Spanish, but considering it's similar to Portuguese, it should be listed under the letter M.

[Carlos1]

If I check, I think I've already located it.

[alemabrahao]

Registry Adjustment (for NAT network)
If your client or server is behind a router with NAT:

Open the Registry Editor (regedit).

Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent.

Create a DWORD AssumeUDPEncapsulationContextOnSendRule and set the value to 2.
Restart the machine.