The Meraki Community
Register or Sign in
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • About VadimIvanov
VadimIvanov

VadimIvanov

Comes here often

Member since Oct 28, 2022

‎12-05-2022

Community Record

5
Posts
0
Kudos
0
Solutions

Badges

First 5 Posts View All
Latest Contributions by VadimIvanov
  • Topics VadimIvanov has Participated In
  • Latest Contributions by VadimIvanov

Re: User VPN authentication using RADIUS, on VMX-S deployed in Azure

by VadimIvanov in Security / SD-WAN
‎10-31-2022 03:27 AM
‎10-31-2022 03:27 AM
If I don't see "addressing and VLAN",  might it be because it's configured in One-Armed Concentrator mode? https://documentation.meraki.com/MX/MX_Installation_Guides/vMX_Setup_Guide_for_Microsoft_Azure   The VM has a single interface, as clearly stated in Azure guide. It works fine as S2S VPN gateway - traffic between Azure subnet and on-prem network goes through. But I'm wondering maybe this mode prevents Radius works and some features are disabled? I don't know in which mode (One-Armed or NAT mode) the device is configured and don't know where to find it. Not sure if that's related to the issue of the topic at all     ... View more

Re: User VPN authentication using RADIUS, on VMX-S deployed in Azure

by VadimIvanov in Security / SD-WAN
‎10-31-2022 02:53 AM
‎10-31-2022 02:53 AM
There are no security groups associated with Windows Server vm and/or MerakiMX vm.  ... View more

Re: User VPN authentication using RADIUS, on VMX-S deployed in Azure

by VadimIvanov in Security / SD-WAN
‎10-31-2022 02:53 AM
‎10-31-2022 02:53 AM
That's what I did. I installed wireshark on Win server machine on the lan interface. All firewall profiles are disabled on the OS. On Azure there are no security groups associated with Win server machine interface. Neither there are security groups associated with Meraki VM interface. I'm able to ping Meraki<>WinServer both directions. I even added explicit rules on Meraki firewall from/towards WinServer machine, but they showing zero hits. ... View more

Re: User VPN authentication using RADIUS, on VMX-S deployed in Azure

by VadimIvanov in Security / SD-WAN
‎10-28-2022 11:10 AM
‎10-28-2022 11:10 AM
Yes, it's a Windows Server on the same Azure tenant, just in different subnet. No security groups on interfaces, so no ports are blocked.  ... View more

User VPN authentication using RADIUS, on VMX-S deployed in Azure

by VadimIvanov in Security / SD-WAN
‎10-28-2022 08:40 AM
‎10-28-2022 08:40 AM
Hi, all I have Meraki VMX-S deployed in Azure. I have enabled User VPN on it. It works fine using Meraki cloud authentication - I can connect using Windows built-in VPN. But if I change Authentication from Meraki cloud authentication to Radius, I don't get any Radius traffic between Meraki firewall and my Radius server (Windows 2016 with NPS service). I know that there is no Radius traffic because I'm running wireshark packet capture on Windows server interface and I do see DNS and ICMP packets between Windows server and Meraki firewall, but no other traffic when I change Radius server details on Meraki or when I attempt to login with VPN client. Meraki literally doesn't attempt to send any Radius packets to Radius server. Meraki packet capture also shows zero traffic between Meraki and Radius server when I attempt to establish VPn connection. Again, i'm using the same VPN connection on the same machine which works just fine once I switch back to Meraki cloud authentication. .   I do able to ping from Meraki to Radius server and vice versa. No firewall on Radius server.   Event log on Meraki shows only client VPN negotiations, and no Radius events.    What could be the reason of Meraki firewall ignoring Meraki User VPN Radius settings?    thanks ... View more
Labels:
  • Labels:
  • Azure
  • Client VPN
Powered by Khoros
custom.footer.
  • Community Guidelines
  • Cisco Privacy
  • Khoros Privacy
  • Privacy Settings
  • Terms of Use
© 2023 Meraki