Hello everyone,    I am solving such a problem.   In the picture I drew how it works for me VVN (virtual voice net) (landline calls).   The Huawei router has (VPN) VLAN 11 and gateway 192.168.11.1 The Cisco MX84 firewall/router has (VPN) VLAN 11 and gateway 192.168.11.4   (pink arrows in foto) If the PBX ( central phone box) connects to the Huawei geteway, the call works but is not visible on the network.  If the PBX ( central phone box) connects to the Cisco MX geteway, calls do not work but the PBX is visible on the network.   Must the VVN be separated from the network for security reasons?   I need the PBX to be visible for remote surveillance.   Please, Advise how it should be connected by default.   Foto.   ... View more

Hi everybody,   I have a problem with our VPN. VPN worked well. The problem occurred while changing the service at the operator. They added their Huawei router in front of our MX84 router.  The current connection is: optical cable (input) to huawey converter (set as bridge), from which the ethernet cable comes to Huawei router from it to Meraki MX WAN1. Public address is set NAT 1:1    VPN works through a mobile device. It doesn't work through windows. Many people who have used a VPN and have it set up do not work. No MX settings have changed. Packets passed. However, it does not connect to the VPN. Does not create ESP encryption.   Can't advise on what to set up or check?   Event Log: Mobile connect to the VPN:  its WORK Dec 21 19:09:59   VPN client connected local_ip: 192.168.xx.xxx, user_id: admin@*********, remote_ip: 194.154.xxx.xxx Dec 21 19:09:58   Non-Meraki / Client VPN negotiation msg: <l2tp-over-ipsec-1|142> CHILD_SA net-1{357} established with SPIs c15d1702(inbound) 0e786aae(outbound) and TS 192.168.xx.xx/32[udp/l2f] === 6.1.0.0/32[udp/54731]   Windows: does not work Dec 21 19:12:25   Non-Meraki / Client VPN negotiation msg: <l2tp-over-ipsec-1|144> CHILD_SA net-1{361} established with SPIs c3e891b6(inbound) 98f9ab7a(outbound) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] Dec 21 19:12:25   Non-Meraki / Client VPN negotiation msg: <l2tp-over-ipsec-1|144> closing CHILD_SA net-1{360} with SPIs cbfc1fa6(inbound) (0 bytes) 9a9a447a(outbound) (0 bytes) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] Dec 21 19:12:19   Non-Meraki / Client VPN negotiation msg: <l2tp-over-ipsec-1|144> closing CHILD_SA net-1{359} with SPIs c8934840(inbound) (0 bytes) d032f6d4(outbound) (0 bytes) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] Dec 21 19:12:19   Non-Meraki / Client VPN negotiation msg: <l2tp-over-ipsec-1|144> CHILD_SA net-1{360} established with SPIs cbfc1fa6(inbound) 9a9a447a(outbound) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] Dec 21 19:12:16   Non-Meraki / Client VPN negotiation msg: <l2tp-over-ipsec-1|144> closing CHILD_SA net-1{358} with SPIs cb67671f(inbound) (0 bytes) c9d65cec(outbound) (0 bytes) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] Dec 21 19:12:16   Non-Meraki / Client VPN negotiation msg: <l2tp-over-ipsec-1|144> CHILD_SA net-1{359} established with SPIs c8934840(inbound) d032f6d4(outbound) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] Dec 21 19:12:16   Non-Meraki / Client VPN negotiation msg: <l2tp-over-ipsec-1|144> CHILD_SA net-1{358} established with SPIs cb67671f(inbound) c9d65cec(outbound) and TS 192.168.xx.xx/32[udp/l2f] === 213.215.xx.xx/32[udp/l2f] Dec 21 19:12:15   Non-Meraki / Client VPN negotiation msg: <l2tp-over-ipsec-1|144> IKE_SA l2tp-over-ipsec-1[144] established between 192.168.xx.xx[192.168.12.2]...213.215.xx.xx[192.168.xx.xx]     thanks so much. best regards   AE. ... View more

Hi everybody,   I have a question.   Can be set to WAN 1 port two VLAN ID ? My network provider will give me a trunk port (from the router) on which there are two VLANs. 1. Internet 2. VVN (IP voice) Is it possible to receive via 1 WAN port?   Meraki MX84 he has two WAN port, but WAN 2 I want to use for internet backup.   the PBX (phone switchboard) has only one Ethernet input. I need to add VVN to the network on a separate vlan. Thank you very much for any advice.      ... View more

Hi everybody,   Please advise / help with my MX device.   Event log :   Source IP and/or VLAN mismatch source_client_ip: 192.168.50.90, source_client_mac: 9C:8E:99:59:E8:E3, source_client_assigned_vlan: 50  last_illegal_ip 192.168.1.10 last_illegal_ip_mapped_vlan_id 1 client_total_illegal_packets 117774 all_total_illegal_packets 139439 last_reported_total 139343 Source IP and/or VLAN mismatch source_client_ip: 192.168.1.10, source_client_mac: 9C:8E:99:59:E8:E2, source_client_assigned_vlan: 1  last_illegal_ip 192.168.50.90 last_illegal_ip_mapped_vlan_id 50 client_total_illegal_packets 5139 all_total_illegal_packets 139343 last_reported_total 139237   My device (server)uses two network adapters.   1. 9C:8E:99:59:E8:E2 static IP - 192.168.1.10 - acess VLAN1  2.  9C:8E:99:59:E8:E3 static IP - 192.168.50.90 - acess VLAN50    The path to the server is from MX (port 3 trunk output all VLAN)  to manageable Cisco switch (input trunk all VLAN) output port 1 (acess VLAN 1 untagged the server network adapters "1") output port 2 (acess VLAN 50 untagged the server network adapters "2")   The connection is OK, but the error message goes every 30 minutes.   have you encountered this problem? Thank you very much for any advice.    ... View more