The Meraki Community
Register or Sign in
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • About AftabK
AftabK

AftabK

New here

Member since Mar 23, 2022

‎03-23-2022
Kudos from
User Count
PhilipDAth
Kind of a big deal PhilipDAth
2
View All
Kudos given to
User Count
PhilipDAth
Kind of a big deal PhilipDAth
1
View All

Community Record

4
Posts
2
Kudos
0
Solutions
Latest Contributions by AftabK
  • Topics AftabK has Participated In
  • Latest Contributions by AftabK

Re: Install custom hostname certificate for AnyConnect on the MX

by AftabK in Security / SD-WAN
‎03-24-2022 08:07 AM
2 Kudos
‎03-24-2022 08:07 AM
2 Kudos
Thank you so much, PhilipDAth!   I was able to resolve the cert warning message for VPN using a profile with the dynamic host names of the MX.    https://documentation.meraki.com/MX/Other_Topics/Dynamic_DNS_(DDNS) https://documentation.meraki.com/MX/AnyConnect_on_the_MX_Appliance/Client_deployment      ... View more

Re: Install custom hostname certificate for AnyConnect on the MX

by AftabK in Security / SD-WAN
‎03-24-2022 06:29 AM
‎03-24-2022 06:29 AM
I wasn't aware of that option. That's great.   The MX is using DDNS. The public domain name is companyname-sitename right now. Do I just change it to vpn.companyname.com if that's what I want to use or should I keep it as is and create a AnyConnect profile with the current domain name? The current domain is companyname-sitename-somechars.dynamic-m.com.    Thank you so much! ... View more

Re: Install custom hostname certificate for AnyConnect on the MX

by AftabK in Security / SD-WAN
‎03-23-2022 07:21 PM
‎03-23-2022 07:21 PM
Thank you for the response.   The issue is the AnyConnect client VPN is using an auto-generated cert currently. This throw a "Security Warning: Untrusted Server Certificate" warning when users connect thru the VPN. I'm trying to remove this message by installing a public CA signed certificate.    I will be deploying a profile as well but wanted to resolve the cert warning issue first.  ... View more

Install custom hostname certificate for AnyConnect on the MX

by AftabK in Security / SD-WAN
‎03-23-2022 02:58 PM
‎03-23-2022 02:58 PM
Hi,    Has anyone been able to successfully install a custom hostname signed certificate on the MX? I am getting a "Failed verifying Device Cert with the Cert Chain" error message. I do have an open case with support already but wanted to reach out to the community as well.    The last reply I received from support was to make sure that the certificate is PEM encoded. In the CA reply, I did receive the signed certificate with a .pem extension along with the intermediate/root certificate bundle with a .pem extension. I attempted to upload them but still received the cert chain error.    I also converted the .pem to a .cer format using openssl but still received the cert chain error.   openssl x509 -inform PEM -in cacert.pem -outform DER -out certificate.cer   Could you please help me resolve the cert chain error?   Thank you in advance.     ... View more
Kudos from
User Count
PhilipDAth
Kind of a big deal PhilipDAth
2
View All
Kudos given to
User Count
PhilipDAth
Kind of a big deal PhilipDAth
1
View All
My Top Kudoed Posts
Subject Kudos Views

Re: Install custom hostname certificate for AnyConnect on the MX

Security / SD-WAN
2 798
View All
Powered by Khoros
custom.footer.
  • Community Guidelines
  • Cisco Privacy
  • Khoros Privacy
  • Privacy Settings
  • Terms of Use
© 2023 Meraki