Meraki

Community

About JReed

Re: vMX100 in AWS support for Client VPN

by in Security & SD-WAN
‎Apr 6 2019 6:35 PM
1 Kudo
‎Apr 6 2019 6:35 PM
1 Kudo
Thanks @PhilipDAth . I've been using PowerShell scripts to create the VPN on Windows for a few years now with -SplitTunnel enabled, but I wasn't aware of the Add-Vpnconnectionroute cmdlet. I was using a rather complicated setup where a scheduled task fired when the VPN connection was made in order to add routes using the New-NetRoute cmdlet. Then another scheduled task would run then the VPN connection was disconnected, and the routes would be removed with the Remove-NetRoute cmdlet. I imagine switching to Add-Vpnconnectionroute will be a much cleaner and easier to implement solution. ... View more

Re: vMX100 in AWS support for Client VPN

by in Security & SD-WAN
‎Apr 6 2019 4:31 PM
‎Apr 6 2019 4:31 PM
@PhilipDAth adding the Client VPN subnet range to the private subnet security group fixed problem of accessing instances in the the private subnet. That makes sense since now I understand that the vMX100 isn't NATing the Client VPN clients. Seems like I'll have to use split tunnel in this scenario.  ... View more

Re: vMX100 in AWS support for Client VPN

by in Security & SD-WAN
‎Apr 6 2019 12:22 PM
‎Apr 6 2019 12:22 PM
Yes, although I wouldn't think this should matter. I would expect that the Client VPN NATs the client's address. ... View more

vMX100 in AWS support for Client VPN

by in Security & SD-WAN
‎Apr 6 2019 7:56 AM
‎Apr 6 2019 7:56 AM
Does the vMX100 appliance when deployed in an AWS VPN support Client VPN connections? I can make a Client VPN connection but packets don't seem to be routed to the LAN side. This document does not describe the Client VPN feature: vMX100 Setup Guide for Amazon AWS If the Client VPN is not currently a supported feature in the vMX100, then the document should mention that, and the UI should remove the Client VPN. I have a feeling Client VPN may not be possible as the vMX100 lacks the Addressing & VLANs page.    BTW: The site-to-site AutoVPN with an on-premises MX250 is working fine, but it would be nice to be able to make direct Client VPN connections to the AWS site. It would also be nice to use the vMX100 as the NAT Gateway for the private side instances. Currently I have to deploy a NAT Gateway since the vMX100 doesn't support this capability. ... View more
My Top Kudoed Posts
© 2024 Cisco Systems, Inc.