@RichardChen1 wrote: Since the concentrator has a lan ip address. What kind of port forwarding required for client vpn to work? Just udp500/4500 to lan ip? Yes, UDP/500 and UDP/4500 is enough as with NAT-T, after the initial exchanges on UDP/500 all is encapsulated in UDP/4500. ... View more

See here for my current Azure costs: https://community.meraki.com/t5/Security-SD-WAN/TCO-for-vMX100-in-Azure/m-p/30075 ... View more

Yes, I have a case open....was submitted to development.... ... View more

You can. In Windows you have to go to network connections and change the setting for idle timeout. The only way to "enforce" this is probably if the client is in an Active Directory environment or such where you can control the privileges/policies.    Control Panel\Network and Internet\Network Connections > select the VPN connection > check Properties > Options tab > "Idle time before hanging up" ... View more

If that is not the Interface name for the port then you need to refresh your topology. ... View more

It is not a well known issue.  That's why it took me so long to remember.   ps. Nobody should be using 3DES anymore.  🙂 ... View more

The upgrade to version 13.24 fixed this issue. ... View more