activate second WAN for VPN

[Jose_aisos]

I have 02 links (primary and secondary) automatically my VPN goes through the primary one but I want the VPN to go out through my second link every time I have a drop in the main internet, I have the autoVPN configuration activated.

[PhilipDAth]

Without configuring anything - this is the default behaviour for AutoVPN.

[Jose_aisos]

thanks for your answer. I have it configured as automatic but still I can't connect to the vpn, is there a rule that is created?

[PhilipDAth]

Are you using AutoVPN between MX - or are you talking about Client VPN between a computer and a MX?

If it is a client VPN, connect to the DDNS name of the MX.  This should update within 10 minutes of a failure happening.

https://documentation.meraki.com/MX/Other_Topics/Dynamic_DNS_(DDNS) 

[Jose_aisos]

It is an AUTOVPN between a VPN client of a computer and the MX and in my client configuration I have it with the hostname

[PhilipDAth · Accepted solution]

If you are connecting via that hostname, then on WAN link failover DDNS will update that entry with the IP address of the second WAN port.  As long as the client is connecting to that, it should work.

The other consideration is if the MX has the public IP directly on its second WAN port, or if it is sitting behind something doing NAT.  If it is sitting behind something doing NAT, and that device will need to port forward udp/500 and udp/4500 to the MX.

[Jose_aisos]

Thanks a lot, I going to configured my FW whit the ports indicates and i'll down my wan 1 to test.

[Jose_aisos]

Hi PhilipDAth,

I tried to configure what it indicates but even so my wan 2 does not raise the VPN, my users cannot connect to the VPN, I am going to ask my provider to remove the NAT from the router and for my FW to take the IP of the router.

[Jose_aisos]

Hi Philip,

I get the following message 

• xx.xx.xx.xx is the primary IP address of Internet port 2 and cannot be forwarded.

[Jose_aisos]

Thank you very much for the help, I was finally able to use my wan 2 with my vpn, the problem was that I was behind a nat, my provider disabled it and I was able to connect.