Community
  • About Teechan
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Re: Client VPN Issue

by Teechan in Security / SD-WAN
‎02-07-2019 04:43 PM
‎02-07-2019 04:43 PM
@NolanHerring Very awesome.  ... View more

Re: Client VPN Issue

by Teechan in Security / SD-WAN
‎02-07-2019 04:42 PM
1 Kudo
‎02-07-2019 04:42 PM
1 Kudo
@Bonifas What errors are you getting in Meraki? You confirmed that the adapter settings are reflecting the correct security configuration?   https://documentation.meraki.com/MX/Client_VPN/Client_VPN_OS_Configuration  ... View more

Re: Client VPN issue

by Teechan in Security / SD-WAN
‎02-05-2019 04:58 PM
‎02-05-2019 04:58 PM
We noticed that this occurs when Windows installs updates. I confirmed by disabling auto updates and only allowed updates for a small group. Users that were updated were the only ones who reverted. ... View more

Re: Client VPN with L2TP in mid-size enterprises

by Teechan in Security / SD-WAN
‎02-05-2019 04:45 PM
2 Kudos
‎02-05-2019 04:45 PM
2 Kudos
We are currently using Meraki MXs for Client-VPN with L2TP and IPsec in our env.  I saw that someone already suggested Anyconnect, I'd absolutely agree.    The current issues we are running into as a result of Win10, are crippling.    1. https://community.meraki.com/t5/Security-SD-WAN/Client-VPN-Issue/m-p/37181/highlight/true#M9355 2. Lately, everytime we receive Windows updates the adapter settings revert back to default - Unless your users are allowed to access their adapter settings, you'll have to reconfigure the protocols in the sec tab.   You could opt to disable a restrictive GP so they can fix it themselves, or remotely fix it for the user, granted your remote software allows for UAC access, it is time consuming.     ... View more

Re: Client VPN Issue

by Teechan in Security / SD-WAN
‎02-05-2019 04:20 PM
‎02-05-2019 04:20 PM
Thanks Philip, it was not installed on user's laptop. ... View more

Client VPN Issue

by Teechan in Security / SD-WAN
‎02-05-2019 03:57 PM
4 Kudos
‎02-05-2019 03:57 PM
4 Kudos
Came across a user who was unable to establish a vpn connection on his Dell laptop, running Win10. After entering his username and password, the user was stuck in a "connecting" state.    MX Appliances did update a few days ago, however all other users could connect to vpn without issue.  Dell laptop was newly imaged to Win10 Meraki gave multiple errors -  Feb 5 13:07:45   Non-Meraki / Client VPN negotiation msg: failed to begin ipsec sa negotiation. Feb 5 13:07:45   Non-Meraki / Client VPN negotiation msg: no configuration found for 6.1.0.1.         Feb 5 13:06:15   Non-Meraki / Client VPN negotiation msg: IPsec-SA established: ESP/Transport xxxxxx spi=60769056(0x39f4320) Feb 5 13:06:15   Non-Meraki / Client VPN negotiation msg: IPsec-SA established: ESP/Transport xxxxxx spi=213759384(0xcbdb598) Feb 5 13:06:15   Non-Meraki / Client VPN negotiation msg: ISAKMP-SA xxxxxx Feb 5 13:06:14   Non-Meraki / Client VPN negotiation msg: invalid DH group 19. Feb 5 13:06:14   Non-Meraki / Client VPN negotiation msg: invalid DH group 20. DH 19&20 Most commonly for me, when a client didn't have Client VPN configured to properly authenticate with AD etc - Since it only affected one user, this is not the issue   Confirmed FW wasn't blocking Confirmed that adapter settings were correct Confirmed PSK was accurate Uninstalled/Reinstalled all Miniports including registry entries Confirmed TLS settings Confirmed Dell apps Smartbyte and Killer Control Center not installed   No dice.    Came across https://www.geekshangout.com/vpn-connection-hangs-in-connecting/#comment-32375    This article allowed me to connect the user. Win10 issue FTW.   Just figured I'd post to save you all the time.     ... View more
© 2019 Meraki