we are a pure Windows environment so I've only tried it on windows.. here is my full script I use for deployment.. I'm working on a full write up on this as we speak. $ServerAddress = "xxx.xxx.xxx.xxx" $ConnectionName = "Meraki Client VPN" $PresharedKey = "A Password" Add-VpnConnection -Name "$ConnectionName" -ServerAddress "$ServerAddress" -TunnelType L2tp -L2tpPsk "$PresharedKey" -AuthenticationMethod PAP -Force Start-Sleep -m 100 New-NetIPsecMainModeCryptoProposal -Encryption AESGCM128 -Hash SHA1 -KeyExchange DH14   ... View more

@Jwiley78  our Meraki Client VPN passes PCI scans.  You have to have support up your encryption to AESGCM128 and KeyExchange to DH14 then change the encryption level on your end points... I did this via PowerShell  New-NetIPsecMainModeCryptoProposal -Encryption AESGCM128 -Hash SHA1 -KeyExchange DH14   ... View more

We were having issues passing PCI scans due to Meraki Client VPN.. After several call Meraki Support change the Client VPN Encryption to more stringent requirements (AES128 encryption with DH group 14 - Required by PCI-DSS 3.2). Now had to update all my end points to use this new encryption standard and configure the Meraki Client VPN... I was able to cerate a small PowerShell Script to automate this process for me and set all the settings needed.   $ServerAddress = "xxx.xxx.xxx.xxx" $ConnectionName = "Meraki Client VPN" $PresharedKey = "A Password" Add-VpnConnection -Name "$ConnectionName" -ServerAddress "$ServerAddress" -TunnelType L2tp -L2tpPsk "$PresharedKey" -AuthenticationMethod PAP -Force Start-Sleep -m 100 New-NetIPsecMainModeCryptoProposal -Encryption AESGCM128 -Hash SHA1 -KeyExchange DH14 ... View more