There is now a second interface on my vMXs showing on the Appliance Status page, has anyone seen any information on it     ... View more

Hi Bryce,   I've set a few of the up for some customers I work with, on the most recent ones I've normally added an NSG for the vMX subnet and allowed inbound traffic on UDP 500 and 4500 for client VPN or 443 (or selected custom port) for AnyConnect.  To be honest most of the recent deployments have used AnyConnect, so I'm not sure if there has been any changes which require additional configuration for Client VPN, but a quick thing to try anyway.   You may also want to add a NSG rule to allow ICMP in for testing PINGs.    A simple way to check if this has worked is to check the Event Log for the vMX for Client VPN or AnyConnect entries ... View more

Update again 7 months later - flawless operation with the same firmware I downgraded to. Works perfectly not a single hitch. Totally a firmware thing. 16.16.9 ... View more

Has anyone found that the MA-ANT-C1-B or any other external antenna will work with an MX67C? ... View more

One request. Could you upload the pcap file here, just so I can have a look at it ? 🙂 ... View more

I just ran across this update. Has anyone got this working with a per device MAC authentication and VLAN assignment, like the Freeradius setup? ... View more

Negative.  It is a complex configuration. ... View more

Do you have an updated link or a downloaded version, this one doesn't seem to work anymore.  Thanks ... View more

I switched the vMX to Routed Mode, this got the Client VPN on the vMX working as desired but, caused an issue with the onsite MX where it lost connectivity to Azure subnets through the Auto-VPN, this is because the routed MX can only be configured with a single LAN, so it was only allowing the default LAN and Client VPN pool to be shared over the VPN.  I could partially fix this by setting the vMX as the IPv4 default route, but then this caused issues with non-Meraki VPNs, it would also cause excessive Azure egress traffic which would have associated costs.   After a long call to support going through various things, I have set the device back to Passthrough mode now.  Apart from not being able to use full-tunnel for VPN clients, everything else seems to work on the MX and vMX.  Looking through posts in various forums it sounds like another device would be needed to do the NAT for internet access.     ... View more

Yes the MX would relay DHCP to the DC's ... View more

Thanks, I checked this after seeing one of you previous posts/replies. On this one, both sides set to Auto/Auto.   ... View more

Thank You @PhilipDAth  ... View more