Meraki

Community
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

About Tim-WN9Z

Re: Strange AutoVPN Issue, any suggestions

by in Security & SD-WAN
‎Mar 7 2022 7:05 AM
‎Mar 7 2022 7:05 AM
The lab setup in question if almost ridiculously simple...    All three MX64s have WAN1 attached to a public address vlan from Spectrum on 173.95.x.x/27, no filtering between them.   Their WAN2 is attached to a public address vlan from ATT on 12.31.x.x/27, no filtering between them. Two of them get set for site-to-site HUB functionality and one as a spoke.   Hub-2 shows green VPN status for both peers, Hub-1 and Site-1.   Hub-1 and Site-1 show no peers... and there is no ip flowing between units that I can determine. ... View more

Strange AutoVPN Issue, any suggestions

by in Security & SD-WAN
‎Mar 4 2022 9:54 AM
‎Mar 4 2022 9:54 AM
I have a lab setup with 3 MX-64s.   All three have two WAN connections, one a Spectrum link (WAN1), the other an ATT DIA link (WAN2).  All 3 WAN1s are on the same SPECTRUM subnet and all 3 WAN2s are on the same ATT subnet.   There are no firewalls between the MXs and the carrier CPE, the WAN links are fully open public IP links.   I cannot get AutoVPN to set up no matter what I do.   I set up 2 of the MX-64s as Mesh HUBs and planned for one to act as a sample spoke.    I configure the 2 HUBs with no static routes, a completely basic config.  One of the 2 HUBs sets up and sees the other HUB, the other HUB says it cannot reach the VPN Registry.   Is there some kind of weird limitation of WAN ports not being on the same subnet???     Any and all comments are welcome.   Tim McKee ... View more
Labels:
© 2024 Cisco Systems, Inc.