Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About shawn_h
shawn_h
Here to help
Member since Aug 9, 2022
Dec 13 2023
Community Record
7
Posts
0
Kudos
1
Solution
Badges
Aug 19 2022
12:14 PM
This is working now. The issue was on the Fortinet side in case anyone else runs into this issue.
... View more
Aug 11 2022
7:32 AM
I appreciate the reply. I am working with them and they seem mystified that isn't working. I am 100 percent positive this has worked in the past as I've personally used it, so I'm not sure why it is "unsupported". This worked on this hardware, this tunnel in previous firmware versions.
... View more
Aug 11 2022
6:38 AM
The Fortinet is a VPN peer of the Meraki and they are connected via the internet. The tunnel between the Meraki and the Fortinet works fine other than for AnyConnect clients connecting to the Meraki. The Fortinet is a third party tunnel to the Meraki. There are no configured static routes on the Meraki. I'm not understanding why a static route would be needed for AnyConnect clients but not any of the other VLANs local to the Meraki, which work on the tunnel. Meraki support tells me this configuration is supported.
... View more
Aug 11 2022
6:15 AM
The AnyConnect subnet is in the encryption domain on the Fortinet. "You also have the route in the mx pointing whatever the remote subnet is to the fortinet and have vpn enabled for that, correct?" I'm not sure how to confirm the "routing" on the MX as the routing table in the GUI is... interesting? When you say "VPN enabled for that", I assume you mean the AnyConnect subnet? If so, yes:
... View more
Aug 10 2022
7:04 AM
It is supported. We have an existing, working tunnel between our Meraki MX100 and a Fortinet firewall. I need AnyConnect Client VPN to the Meraki to access resources behind the Fortinet tunnel.
... View more
Aug 9 2022
7:28 AM
Hi all, I've read many topics complaining of this same issue, but have yet to find a resolution that applies in my case. As the title says - our setup is an MX100 with a non-Meraki peer at our colocation facility. AnyConnect clients can access anything *local* to the Meraki, but can't access any hosts on the remote side of the tunnel. VPN Client --> MX100 --//-> Fortinet Firewall VPN subnet is enabled in the site to site settings and my layer 3 rules are allow any any for testing.
... View more
Labels:
- Labels:
-
3rd Party VPN
-
Client VPN
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 5910 | Aug 19 2022 12:14 PM |
© 2025 Cisco Systems, Inc.
