"NAT type: Unfriendly" or "VPN Registry: Disconnected"

[ehsan2305]

Dear Sir,

My MX64 device WAN static IP is :- 192.168.8.104

And VPN status as :-

NAT traversal :-

My question is that port : 48822 in NAT type are fixed for each cisco meraki device or

if MANUALLY : PORT FORWARDING as :-

Than we have to type ip = 192.168.8.104 and port : 48822

in above case we have to use same port or we can use any unreserved port.

Because there is a device which is giving as : -

"NAT type: Unfriendly" or "VPN Registry: Disconnected"

Thanks and regards.

[BrechtSchamp]

Yes, you can use pretty much any UDP port you want. It needs to be unused (so steer away from the well-known UDP ports), your provider needs to allow incoming and outgoing connections on it, and you need to setup port forwarding if your MX is behind a NAT router.

The 48822 is a port that is dynamically chosen by the MX from the range 32768-61000. This is for the automatic NAT traversal process. For the manual NAT traversal configuration you're free to use ports from outside that range.