Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About DavisMurphy
Community Record
7
Posts
2
Kudos
0
Solutions
Badges
Oct 13 2024
9:41 AM
2 Kudos
I'm an MSP and the "office" in this scenario is a client. I left that part in the initial description to help with explaining the issue. My house serves as my Company HQ. We both have Client VPN enabled already. Should I try a site-to-site? I've tried that before but since the internet at my company HQ is Starlink (CGNAT / no public IP) I had a lot of trouble.
... View more
Oct 13 2024
7:58 AM
I have 2 MXs, one at home and one at the office. I'm trying to setup an off-site backup solution where the office NAS sends files to my home NAS daily. For this, I needed to enable Port Forwarding from the source (Office) on my home MX. Public Port: Synology Hyper Backup Port LAN IP: Home NAS (Destination) local IP Local Port: Same as Public Port Allowed Remote IPs: Public IP of Office (Source) Since doing this, I can no longer connect to my office network. I've tried Client VPN, it fails to connect at all. We also have an RDS server but that will only connect for a split second then drop connection. It just keeps doing that in a loop. I've added another port forward to my PC's IP as a temp measure (Port 3389 / Public IP for the Office), and it seems to connect for a few seconds, but then drops connection. Do you have any ideas? It can't be impossible to connect to a network that I'm port forwarding from. Can it? Thanks!!
... View more
Labels:
- Labels:
-
Client VPN
-
Firewall
Mar 6 2024
8:50 AM
I see you have IPv6 enabled on WAN1 (starlink). I do not have that. Maybe ill give that a try tonight. Thanks for all the info!!
... View more
Mar 5 2024
7:08 PM
That sounds exactly like my setup!! I wish I could figure out what I need to do to get mine to work. Other sites/articles I've read said this is pretty easy / should work almost OOB. But for some reason mine is not. Was there any port forwarding / NAT setup / extra config involved? I had some issues at the beginning when I was setting up my Starlink. I'd be curious to see what this user's Uplink page looks like on their home MX. You can see in my original post that I have a picture of mine saying that it's a "dynamic" IP, but then displays an IP address in the Static IP field that does not match my current IP from Starlink... Starlink IP at this moment, but Uplink IP is different: Confirmation that I'm set to Dynamic for the uplink I'm wondering if this is causing my connectivity issues from outside.
... View more
Mar 5 2024
6:37 PM
That "priority" plan with the fixed IP is crazy expensive. More than 2x the price, and they suggest different hardware now too.
... View more
Mar 5 2024
6:10 PM
Yes it was working when both sides had ISPs with Static IPs. I'm aware that the dynamic IP from Starlink is what caused this to stop working. I've seen other people say they could get site-to-site VPN to work with CGNAT ISP, but I'm not sure how.
... View more
Mar 5 2024
5:40 PM
I'm having a really hard time getting a site-to-site VPN connection to work with the Starlink CGNAT. When I first connected my MX65 to the Starlink, I wasn't aware of the Dynamic IP that Starlink provides, so I tried to set it up the same way I've setup MXs before. Now it seems like my Config page has that original IP locked in, despite being set to dynamic: I'm not even sure if this related to my problem, just something weird I noticed My goal is try to get 2 Synology NAS devices to connect for replication. The source is at a site with traditional internet. The Partner (replication) is on the Starlink. Both ends are using Meraki MX. This setup has worked before (without needing NATs/Forwarding). It stopped working when I switched to Starlink ISP. I've tried to use services like remote.it to get a "static" address for my source site to connect to, but that hasn't worked either. I've read that other people have tried to setup NATs or Port Forwarding to get around this, but they haven't included how they set this up. So I've tried to do this with the current "public IP" you see above, but I'm still unable to connect from the Partner site. Here's the 1:1 NAT I've tried. I've tried to split the Starlink Uplink, so one side goes to my MX, and the other goes to an Asus Router with OpenVPN enabled. Then plug the Synology into the Asus with it's VPN Static IP, but the connection is super unreliable. MX and Asus both are very unhappy. I see that some people say they had no issues with this, which is frustrating because I have countless hours in this and can't figure it out. Hope someone here has an idea. Thanks!
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 253 |
© 2024 Cisco Systems, Inc.
