Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About AdminTS
AdminTS
Comes here often
Member since May 28, 2024
Jul 26 2024
Community Record
17
Posts
0
Kudos
0
Solutions
Badges
Jul 26 2024
2:50 AM
Does anyone here have any ideas on how to optimize such connections?
... View more
Jul 23 2024
4:15 AM
Thanks for the info. I'm not talking about a VPN tunnel, but two tunnels. Were you aware of that?
... View more
Jul 23 2024
2:06 AM
VPN is activated in the subnet 10.61.0.1. Otherwise the VPN client connection would not work at all. But it does! What do you mean by recording the subnet on the other side? Do you mean the VPN subnet or the public IP address?
... View more
Jul 23 2024
1:53 AM
I would like to show you here how the route should work. With Client VPN I connect to the Meraki MX64 (Gateway 10.61.0.1). The VPN client subnet is 10.61.20.0. I would now like to access the server, which is located in the subnet 192.168.12.0/24. Logically, I cannot ping the subnet of the server. There is a site-to-site VPN connection for this subnet, which works properly. What do I have to do to ensure that the connection to the server from outside works?
... View more
Jul 23 2024
1:49 AM
I don't currently know what you mean by that. Yes, it is a sito-to-site connection "non-Meraki", as the end is not a Meraki firewall. I am only interested in configuring that you start with client VPN and then reach the end via sito-to-site. Both connections work independently but unfortunately not together. So I can't access my resources, even though the client VPN is established. What exactly do I have to do here to make it work?
... View more
Jul 23 2024
1:44 AM
I cannot add a route because the servers are not in my own network. So another solution is certainly needed.
... View more
Jul 22 2024
9:24 AM
We have set up a client VPN connection to our MX, which works. Now we are also setting up a site-to-site VPN connection to our server, which is not located in our office. We have now found that all VPNs work but we cannot access the server. Do we need a static or source-based route for this to work? If so, what should the route look like? Important: The subnet of the server is not configured in Meraki, as the server is located outside the network. How can we solve this problem?
... View more
Labels:
- Labels:
-
Auto VPN
-
Client VPN
-
Firewall
Jul 15 2024
6:31 AM
I was finally able to solve the problem. I'd be happy to tell you how I finally managed to do it. We have several WLAN networks and some of them were set up with VLAN tagging and not as bridged, but tunneled to a concentrator. We had to set this up so that all devices received the correct IP addresses. We briefly deleted this configuration and then undid it. Since then, we have also been able to establish a VPN connection. Everything works as it should. However, the VPN connection does not work on the smartphone. No matter whether with Cisco AnyConnect or Android's own VPN solution. I'm still in the dark at the moment.
... View more
May 28 2024
8:10 AM
I have deactivated the Windows firewall or the antivirus and nothing has changed.
... View more
May 28 2024
8:03 AM
No, unfortunately I don't see any records regarding VPN on the MX. This means that the connection does not even reach the MX. But because all clients cannot connect, the problem must not be with the clients or the MX. But I can't imagine there being a problem with the ISP router either.
... View more
May 28 2024
7:32 AM
I have also often read that Windows updates can lead to problems. Then I wasn't imagining it because of the ports. It wouldn't make much sense to open ports for Ipsec anyway. We can't set port forwarding on the ISP router, as it no longer operates as a router, but only forwards the Internet (bridge mode).
... View more
May 28 2024
6:57 AM
Even if you set up a VPN connection again with Powershell, it will not solve the problem. At least I am convinced that it will. In the end, it depends on the same thing whether you add the VPN manually or with Powershell.
... View more
May 28 2024
6:44 AM
Unfortunately, I cannot say how to deal with Powershell. I don't have enough experience. However, we have deleted and recreated the VPN that we set up under Windows several times. We assume that there is no error there.
... View more
May 28 2024
6:13 AM
I have already tested whether other clients also have problems with VPN. We can't connect to other clients either. So it can't be due to the clients.
... View more
May 28 2024
5:38 AM
We have set up the client VPN connection in MX64. No connection seems to be established with several clients. We have learned that the ports UDP 500 and UDP 4500 must be released. In the input rules in Layer 3, the two ports have been released (but when we check the ports, they are still considered closed). Our Internet router is running in bridge mode, just for information. We noticed that the VPN connection or no attempts arrive on the MX, which means that it must be due to the clients or do you agree? We therefore don't think that we need to make any further adjustments to the firewall. Although we have also enabled the ports in the clients, nothing else happens. Error 789 keeps appearing in the events in Windows. We can safely rule out the possibility of an input error. We have also tried to set up port forwarding for both ports in the MX. However, we cannot enter or save the public IP address of the MX as the destination. A message appears stating that this IP address has not been configured as a subnet. Are we making a mistake in the whole thing?
... View more
Labels:
- Labels:
-
Client VPN
-
Firewall
© 2024 Cisco Systems, Inc.
