Hi everybody,
I have a problem with our VPN.
VPN worked well.
The problem occurred while changing the service at the operator.
They added their Huawei router in front of our MX84 router.
The current connection is: optical cable (input) to huawey converter (set as bridge), from which the ethernet cable comes to Huawei router from it to Meraki MX WAN1. Public address is set NAT 1:1
VPN works through a mobile device.
It doesn't work through windows. Many people who have used a VPN and have it set up do not work. No MX settings have changed.
Packets passed. However, it does not connect to the VPN. Does not create ESP encryption.
Can't advise on what to set up or check?
Event Log:
Mobile connect to the VPN: its WORK
| Dec 21 19:09:59 | | VPN client connected | local_ip: 192.168.xx.xxx, user_id: admin@*********, remote_ip: 194.154.xxx.xxx |
| Dec 21 19:09:58 | | Non-Meraki / Client VPN negotiation | msg: <l2tp-over-ipsec-1|142> CHILD_SA net-1{357} established with SPIs c15d1702(inbound) 0e786aae(outbound) and TS 192.168.xx.xx/32[udp/l2f] === 6.1.0.0/32[udp/54731] |
Windows: does not work
| Dec 21 19:12:25 | | Non-Meraki / Client VPN negotiation | msg: <l2tp-over-ipsec-1|144> CHILD_SA net-1{361} established with SPIs c3e891b6(inbound) 98f9ab7a(outbound) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] |
| Dec 21 19:12:25 | | Non-Meraki / Client VPN negotiation | msg: <l2tp-over-ipsec-1|144> closing CHILD_SA net-1{360} with SPIs cbfc1fa6(inbound) (0 bytes) 9a9a447a(outbound) (0 bytes) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] |
| Dec 21 19:12:19 | | Non-Meraki / Client VPN negotiation | msg: <l2tp-over-ipsec-1|144> closing CHILD_SA net-1{359} with SPIs c8934840(inbound) (0 bytes) d032f6d4(outbound) (0 bytes) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] |
| Dec 21 19:12:19 | | Non-Meraki / Client VPN negotiation | msg: <l2tp-over-ipsec-1|144> CHILD_SA net-1{360} established with SPIs cbfc1fa6(inbound) 9a9a447a(outbound) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] |
| Dec 21 19:12:16 | | Non-Meraki / Client VPN negotiation | msg: <l2tp-over-ipsec-1|144> closing CHILD_SA net-1{358} with SPIs cb67671f(inbound) (0 bytes) c9d65cec(outbound) (0 bytes) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] |
| Dec 21 19:12:16 | | Non-Meraki / Client VPN negotiation | msg: <l2tp-over-ipsec-1|144> CHILD_SA net-1{359} established with SPIs c8934840(inbound) d032f6d4(outbound) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] |
| Dec 21 19:12:16 | | Non-Meraki / Client VPN negotiation | msg: <l2tp-over-ipsec-1|144> CHILD_SA net-1{358} established with SPIs cb67671f(inbound) c9d65cec(outbound) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] |
| Dec 21 19:12:15 | | Non-Meraki / Client VPN negotiation | msg: <l2tp-over-ipsec-1|144> IKE_SA l2tp-over-ipsec-1[144] established between 192.168.xx.xx[192.168.12.2]...213.215.xx.xx[192.168.xx.xx] |
thanks so much. best regards
AE.
