Hi Alemabrahao,  Any idea how to open a support case with Meraki ?  I have dealt with Cisco in past raising TAC case however I don't have cisco account with my current company to raise TAC case with them directly.  Do I need to have an account or can I raise on behalf of customer ( again customer doesn't have cisco account ) ?  Regards, ... View more

Made changes to following:  Pre-shared key is greater than 14  Still no joy  As per Alex comment :  Configure the peering on Dashboard so that the LocalID of the MX is whatever public IP its traffic is getting NAT'd to Any chance of explaining how to achieve this ?  ... View more

So, as per this document, I have configured on both side:  https://documentation.meraki.com/MX/Site-to-site_VPN/MX_to_Sonicwall_Site-to-Site_VPN_Setup     These are the config on Meraki Side:      Kindly let me know if I am missing anywhere any config ?    Regards ... View more

Hi Both,  Thanks again for your quick support.  @alemabrahao, as per your comment, seems I will have to add peer IKE ID ( private IP address of Meraki ) on Sonicwall  Also, remote ID on Meraki ( public IP of sonicwall ).    @Alex, for point A: I believe I will have to add peer IKE ID ( Private IP address of Meraki ) ,              for point B: can you please outline the steps of configuring the peering on Dashboard.    Sorry, first time dealing with meraki .    Thanks  ... View more

Hi Alex and Alemabrahao,  I am back with the same question.  So VPN for Meraki which had public IP configured on its WAN interface is working fine.  However another Meraki at different location which is behind NAT, I am required to configure VPN .  Is there a way of achieving this as I have no visibility of what sits ( router or firewall ) between Meraki and PE.    Thanks ... View more

Hi Alex,  Is this the place where I will be setting up the private IP of Meraki: Sorry, this is the first time working on Meraki and not quire sure how to set up site-to-site VPN on Meraki behind NAT and any other firewall ( can test with either sonicwall or forcepoint ).  Regards, ... View more

Hi Alemabrahao and AlexP,  Thank you very much for your support on resolving this VPN issue between Meraki and Sonicwall.  I have managed to successfully establish a site-to-site VPN with second meraki as this one had public IP address statically assigned to its WAN interface.  Its IKEv2 with following config and works fine Issue with first Meraki is we have private IP assigned to its WAN interface . This means there's extra device ( firewall/router ) between Meraki and PE as Alemabrahao confirmed earlier.    Thank you again for your support .    Regards,   ... View more

Hi Alemabrahao,  Again appreciate your prompt response.  Seems you may be right as I need to find more details regarding clients connectivity which I don't have any visibility as of yet.  Also, we had another MX in different location and while checking IP config for WAN, I could see that this new site got static public IP address configured. I gave a little try to configure VPN with the same sonicwall and looks that this has either established or dropped just after VPN established: VPN Status on Meraki:  On Sonicwall, I can see following: I will try to do further troubleshooting tomorrow.  Thanks again for your support today.  Regards ... View more

Hi alemabrahao,  Our sonic wall also got another VPN with forcepoint and everything is working fine.  We have checked the policy and required ports are open .  I have also checked with aggressive mode on Sonic wall and same error logs seen , provided earlier.  I believe its Meraki which is acting here bit funny.  Any place where I can check VPN related logs only.  All I can find is following on events log:  Regards, ... View more

Hi Alemabrahao,  As always, appreciate your support here.  We have confirmed that there is no firewall before MX and all ports are open.  yes, 10.10.196.0/24 is the local network at sonicwall side.    Still not been able to establish a site-to-site VPN between Meraki and Sonicwall.  ... View more

Hi ,  this is the VPN status on Meraki:  Public IP highlighted in black is public IP of Sonicwall NAT Type friendly highlighted in black is public IP of Meraki will this help to figure out why VPN isn't establishing?    Regards,   ... View more

Hi Alemabrahao,    Appreciate your quick and prompt response.  Please see below config on Meraki:  pre-shared key: Thankyouforhelping19   Public IP : Sonicwall public IP Private subnets: Lan subnets from Sonicwall   On Sonicwall logs, I can see following:  Sonicwall VPN config:  IPSec Primary Gateway / Name or Address: Meraki Public IP Local IKE ID: public IP of Sonicwall Peer IKE ID: public IP of Meraki X1 interface on Sonicwall is WAN interface.  Still cannot see VPN established.  Any further suggestions please ?    Regards, ... View more

Hi Alemabrahao,  I have configured on both sides as per above, however still getting error message.  This is the message I received on Sonicwall:  Time 11:42:45 Oct 19 ID 973 Category VPN Group VPN IKEv2 Event Initiator: Received IKE_SA_INT Response Msg. Type Standard Note String Priority Inform Message IKEv2 Initiator: Received IKE_SA_INT response Src. Name xx.xx.xx.xx ( Meraki Public IP ) Dst. Name Notes VPN Policy: VPN_Meraki_D_Test;   Time 11:39:06 Oct 19 ID 983 Category VPN Group VPN IKEv2 Event Received Notify Error Payload Msg. Type Standard Note String Priority Warning Message IKEv2 Received notify error payload Src. Name xx.xx.xx.xx ( Meraki Public IP ) Dst. Name Notes VPN Policy: VPN_Meraki_D_Test; No Proposal Chosen   Time 11:42:15 Oct 19 ID 972 Category VPN Group VPN IKEv2 Event Initiator: Retransmit IKEv2 Request Due to Remote Party Timeout Msg. Type Standard Note String Priority Inform Message IKEv2 Initiator: Remote party Timeout - Retransmitting IKEv2 Request. Src. Name Dst. Name xx.xx.xx.xx ( Meraki Public IP ) Notes VPN Policy: VPN_Meraki_D_Test;   Any suggestions where to check on Meraki side for the specific site-to-site VPN logs?   Regads, ... View more

Hi Alemabrahao,  Thank you for those two links. I have already gone through these links earlier and still facing issues.  1. I don't see an option of FIPS configuration under  Network-wide -> General.      Our Current version is : MX 16.16 2. I have configured exactly same as per above link however on Sonicwall I can see error message as:      Message Received notify. NO_PROPOSAL_CHOSEN 3. Under Network-wide>>Event log >> All Non-Meraki / Client VPN, I can see following error: Event type: Non-Meraki / Client VPN Negotiation Details: msg: FIPS mode disabled Not quite sure if this FIPS is causing an issue here.    Any suggestion will be highly appreciated.    Regards,      ... View more