VPN Registry Table

[JamesMutie]

Hello Good People,

Is it possible to achieve a design where by , VPN concentrator on NAT mode has a public IP(X.X.X.X) assigned on the internet port. This public IP is floating IP owned by the customer.  A branch MX in routed mode has an MPLS link with an ip of 10.10.10.1.

If  both the branch MX and Concentrator have the same internet breakout on public IP (Y.Y.Y.Y).

How will the VPN registry table look like ? will the autovpn peering be through source IPs or interface IPs  (Entries on the VPN registry) ?

[cmr]

@JamesMutie if the internet gateway for the VPN concentrator and the remote MX that is the other side of the MPLS are one and the same then the tunnels are built between the private internal interface IP addresses

[JamesMutie]

@cmr  Thanks. So that means, the Concentrator Interface IP needs to be changed from the floating Public IP to an a private IP reachable by the remote Branch via MPLS?

[cmr · Accepted solution]

@JamesMutie, yes, pretty much! 

If you leave it as is then as the public IPs are different then the tunnel will be formed over the internet. 

If you make them appear to the Meraki cloud as the same public IP by changing the IP to an internal private one as suggested then the tunnels will build over the private network.

Hopefully that makes sense?

[JamesMutie]

@cmr Thanks Alot. Well explained