client VPN on MX not working behind firewall NAT

[hmc250000]

We have a site with a Meraki MX that site to site VPNs and client VPN behind another firewall that Nat's the traffic to the MX. the site to site VPN's work however not the client VPN. Any ideas what may prevent the client VPN to work? I would assume if site to site VPN works that the outside is able to reach the MX on ports UDP 500
and UDP 4500.

[ww · Accepted solution]

Are you using the Meraki autovpn or non meraki sts vpn?

Meraki autovpn opens the ports from inside. So that basically aways work.

Client vpn is initiated from the outside so for that you need to forward ports to the mx wan ip

[hmc250000]

ahh interesting, thanks.