VPN blocked by router

[Kellysocol]

Hi,

So I have Vodafone Business Gigabit and am trying to set up VPN for clients.

The modem goes into the MX67.

When I try to connect to VPN it gives the same error of timeout.

I have tried port forwarding 443 and 4500 on the router page, but cannot put modem into bridge mode on this new vodafone modem, there is no real way of administering.

I am looking to cable from fibre line in to MS 67 using PPPoE credentials.

Has anyone done this and were there any issues?

[alemabrahao]

What is the error code?

https://documentation.meraki.com/SASE_and_SD-WAN/MX/Troubleshooting_and_Support/Troubleshooting/Trou...

[Kellysocol]

The L2TP-VPN server did not respond. Try reconnecting. If the problem continues, verify your settings and contact your Administrator.

[alemabrahao]

But what is the error code?

Take a look at the link I sent you.

https://documentation.meraki.com/SASE_and_SD-WAN/MX/Troubleshooting_and_Support/Troubleshooting/Trou...

[Kellysocol]

There is no error code just what I said above

[alemabrahao]

Also take a look at this.

https://community.meraki.com/t5/Security-SD-WAN/Cisco-Meraki-Client-VPN-behind-Nat-Router/m-p/258674...

[Kellysocol]

I am reading the document thank you

[PhilipDAth]

What country are you in?  What type of Internet circuit is this?

Can you plug your Internet circuit directly into the MX, and get rid of the ISP router?  You'll need to configure the MX's WAN port to match the ISP's requirements.

[BlakeRichardson]

I would try what Phil has suggested and ditch the other modem if you can.

https://documentation.meraki.com/Platform_Management/Product_Information/Compatibility_and_Firmware/...

[Kellysocol]

I’m in Ireland and just had gigabit straight in installed by Vodafone business.

they have supplied their new router WiFi 7 and its admin page doesn’t allow much wiggle room to control its firewall settings.

I have been given a static public IP. 
I have the pppoe creds.

[PhilipDAth]

Take a look at this post.  Plug the fibre directly into the MX and configure the MX via the local statyus page.

https://www.reddit.com/r/AskIreland/comments/180s7zq/3rd_part_router_help_for_vodafone_broadband/

[Kellysocol]

 I was going to do this in the meraki dash board

[PhilipDAth]

You'll also have the option to enter any required VLAN tag.

[Kellysocol]

So I took the steps and it did not work and I was not able to fiddle more as it's out of my remit.  It looked blocked at ONT

[alemabrahao]

Which operating system are you trying to configure the VPN on? If it's Windows, have you already tried checking the error code in the Windows Event Viewer as previously indicated?

[Kellysocol]

So another update on VPN Gate, I spent the entire day at the practice.

Cisco got on a call with me and helped to configure to the ONT again.  Pppoe failed.  At this point they held their hands and said it’s the ISP.

I went down a rabbit hole and tried everything, got the router DMZ on, firewall off.  Port 400,500, 4500 the works.

tests showed the MX public static ip and 443 connecting and I could ping no problem.

The IPsec is being blocked by the vf router.

Plus Vodafone support is closed on sat and sun, they appear to think businesses are closed at the weekend.

i will be having a very difficult call with them on Monday.