non meraki site to site tunnel meraki mx-84 to CIsco ISR 43xx and 44xx

[cocacond]

We are looking at dropping MPLS and was wondering if anyone had created tunnels between Meraki MX devices and a cisco ISR device.

[Jwiley78]

We've had a site to site with Meraki and an ASA.  It can be a little flaky at times.  It can work I'm sure and hopefully some of the firmware releases have fixed some of these issues.

If you have the availability to go Meraki to Meraki that would be my suggestion.

[cocacond]

I dont have the ability at this time.

[GIdenJoe]

Well, you should get it to work if you don't over complicate things.

You'll need to use IKEv1 for the exchange and only policy based VPNs are supported.
The Meraki side will need to be configured as Hub.
You cannot have traffic going through a non-meraki VPN and then through Auto-VPN.  Each Meraki peer needs a direct non-meraki VPN connection to each remote peer.

Try to use as few traffic selectors as possible.
Rather use a supernet than use individual subnets if you can.
Because there sometimes are issues where a tunnel is basically up but one of the Child-SA's is not and you have to bounce the entire tunnel to get them all back.

[SopheakMang]

yes , it working just fine, you can fine the option in the dachboard for peering with non-meraki device,

for the advance algorithm , you need to open support case and tell them to help change the config at the backend in case you can't fine the advance option in dashboard

[Tarmahmood1]

Hi @cocacond Did you manage to setup a non-meraki tunnel with ISR device. Can you share the script for ISR device to setup tunnel. Thanks.