Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About Ted-Laun
Ted-Laun
Comes here often
Member since Feb 18, 2021
04-01-2022
Community Record
7
Posts
0
Kudos
0
Solutions
Badges
03-18-2022
11:25 AM
You need to set your VPN client to register in DNS. By default this is not checked.
... View more
03-23-2021
03:17 AM
I think I might have found the issue and it isn't pretty. Encryption Method Client VPN uses the L2TP/IP protocol, with 3DES and SHA1 respectively as the encryption and hashing algorithms. As a best practice, the shared secret should not contain any special characters at the beginning or end. from https://documentation.meraki.com/MX/Client_VPN/Troubleshooting_Client_VPN My Shared Secret has a special character as described and was chosen by a Cisco certified partner 4 years ago. I will test this after hours soon . If this is the issue this means we have to touch every device with a VPN client unless someone knows another way.
... View more
03-22-2021
02:10 PM
Windows clients have been connecting in our environment for years and continued when we upgraded to the MX100 3 months ago. I now have the need to connect mobile clients. iPhone and iPads connect with no problem. I have now tried 3 Androids and have yet to connect. Client config couldn't be more basic. You just need Hostname and shared-key. Mar 22 16:33:05 Non-Meraki / Client VPN negotiation msg: IPsec-SA expired: ESP/Transport "removed IP on client side"[4500]->1"removed IP on server side"[4500] spi=149273251(0x8e5baa3) Mar 22 16:32:49 Non-Meraki / Client VPN negotiation msg: unknown Informational exchange received.
... View more
02-19-2021
11:07 AM
I disagree, for disaster situations networking gear is going to be more robust than back-end AD or radius servers. Meraki is also designed for small to medium sized organizations, that may not have multi-site redundancy.
... View more
02-18-2021
09:50 PM
Seems ridiculous that a $10k Firewall would only have one option. You should be able to have at least a few admins that can authenticate client VPN locally. Keep bumping into "little" things like this with Meraki.
... View more
02-18-2021
01:26 PM
Is there a way to set the client VPN to use AD and also Meraki authentication? I have had to shutdown all of my DCs because of an emergency power issue. I would like to be able to connect to VPN without a DC being online.
... View more
