Meraki

Community

About Teechan

Google Fi Data Only & MX67C

by in Security & SD-WAN
‎Sep 14 2020 7:52 PM
‎Sep 14 2020 7:52 PM
Hi All,    I'm trying to get my MX67C connected to cellular using my Google Fi Data Only SIM. I can't find any instructions on how to get it working. I've inserted SIM and I cannot connect to the Meraki cloud. I inserted same SIM to other (non-Meraki) device and the device can reach the internet.    Any advice? Does the MX67C need to have received its initial config from the cloud before it can use cellular?   Thanks in advance!   Update: Got it working! Needs to be connected for initial cloud configuration to pull the APN.  ... View more

Re: Client VPN Issue

by in Security & SD-WAN
‎Feb 7 2019 4:43 PM
‎Feb 7 2019 4:43 PM
@NolanHerring Very awesome.  ... View more

Re: Client VPN Issue

by in Security & SD-WAN
‎Feb 7 2019 4:42 PM
1 Kudo
‎Feb 7 2019 4:42 PM
1 Kudo
@Bonifas What errors are you getting in Meraki? You confirmed that the adapter settings are reflecting the correct security configuration?   https://documentation.meraki.com/MX/Client_VPN/Client_VPN_OS_Configuration  ... View more

Re: Client VPN issue

by in Security & SD-WAN
‎Feb 5 2019 4:58 PM
‎Feb 5 2019 4:58 PM
We noticed that this occurs when Windows installs updates. I confirmed by disabling auto updates and only allowed updates for a small group. Users that were updated were the only ones who reverted. ... View more

Re: Client VPN with L2TP in mid-size enterprises

by in Security & SD-WAN
‎Feb 5 2019 4:45 PM
2 Kudos
‎Feb 5 2019 4:45 PM
2 Kudos
We are currently using Meraki MXs for Client-VPN with L2TP and IPsec in our env. I saw that someone already suggested Anyconnect, I'd absolutely agree.    The current issues we are running into as a result of Win10, are crippling.    1. https://community.meraki.com/t5/Security-SD-WAN/Client-VPN-Issue/m-p/37181/highlight/true#M9355 2. Lately, everytime we receive Windows updates the adapter settings revert back to default - Unless your users are allowed to access their adapter settings, you'll have to reconfigure the protocols in the sec tab.   You could opt to disable a restrictive GP so they can fix it themselves, or remotely fix it for the user, granted your remote software allows for UAC access, it is time consuming.     ... View more

Re: Client VPN Issue

by in Security & SD-WAN
‎Feb 5 2019 4:20 PM
‎Feb 5 2019 4:20 PM
Thanks Philip, it was not installed on user's laptop. ... View more

Client VPN Issue

by in Security & SD-WAN
‎Feb 5 2019 3:57 PM
6 Kudos
‎Feb 5 2019 3:57 PM
6 Kudos
Came across a user who was unable to establish a vpn connection on his Dell laptop, running Win10. After entering his username and password, the user was stuck in a "connecting" state.    MX Appliances did update a few days ago, however all other users could connect to vpn without issue.  Dell laptop was newly imaged to Win10 Meraki gave multiple errors -  Feb 5 13:07:45   Non-Meraki / Client VPN negotiation msg: failed to begin ipsec sa negotiation. Feb 5 13:07:45   Non-Meraki / Client VPN negotiation msg: no configuration found for 6.1.0.1.         Feb 5 13:06:15   Non-Meraki / Client VPN negotiation msg: IPsec-SA established: ESP/Transport xxxxxx spi=60769056(0x39f4320) Feb 5 13:06:15   Non-Meraki / Client VPN negotiation msg: IPsec-SA established: ESP/Transport xxxxxx spi=213759384(0xcbdb598) Feb 5 13:06:15   Non-Meraki / Client VPN negotiation msg: ISAKMP-SA xxxxxx Feb 5 13:06:14   Non-Meraki / Client VPN negotiation msg: invalid DH group 19. Feb 5 13:06:14   Non-Meraki / Client VPN negotiation msg: invalid DH group 20. DH 19&20 Most commonly for me, when a client didn't have Client VPN configured to properly authenticate with AD etc - Since it only affected one user, this is not the issue   Confirmed FW wasn't blocking Confirmed that adapter settings were correct Confirmed PSK was accurate Uninstalled/Reinstalled all Miniports including registry entries Confirmed TLS settings Confirmed Dell apps Smartbyte and Killer Control Center not installed   No dice.    Came across https://www.geekshangout.com/vpn-connection-hangs-in-connecting/#comment-32375    This article allowed me to connect the user. Win10 issue FTW.   Just figured I'd post to save you all the time.     ... View more
© 2024 Cisco Systems, Inc.