The Meraki Community
Register or Sign in
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • About TimW
TimW

TimW

Here to help

Member since Jun 7, 2018

‎11-07-2018
Kudos from
User Count
ChrisStewart
ChrisStewart
1
VinAllen
VinAllen
2
View All
Kudos given to
User Count
NikolaiProniaev
NikolaiProniaev
1
View All

Community Record

5
Posts
3
Kudos
0
Solutions

Badges

1st Birthday
First 5 Posts
Lift-Off View All
Latest Contributions by TimW
  • Topics TimW has Participated In
  • Latest Contributions by TimW

Re: Feature Request: IKEv2 Support in MX appliances

by TimW in Security / SD-WAN
‎11-07-2018 04:33 PM
‎11-07-2018 04:33 PM
@PhilipDAth wrote:   Amongst all my customers, in the year to date so far, none has had a Strongswan outage, and one has had an Azure VPN outage (and they actually got a credit from Microsoft for it). We were hit by the same 9/4 outage in the Texas datacenter (IIRC, we too got a credit back too!)   All good things to consider, and yes, we have crazy up-time on servers as well so it wouldn't likely be a problem. We live in a 'SLA required' world.    I couldnt agree more that StrongSwan is a good solution. Is it good for everyone? No. Could Meraki close the gap? Of course! 🙂 ... View more

Re: Feature Request: IKEv2 Support in MX appliances

by TimW in Security / SD-WAN
‎11-07-2018 04:15 PM
‎11-07-2018 04:15 PM
@PhilipDAth wrote:   If you use StrongSwan then you don't use the Microsoft policy based VPN.  From memory, the VM to run StrongSwan is cheaper than the Microsoft policay based VPN service. Indeed! Strongswan in this scenario is a replacement for the RRAS hosted solution Azure provides. The only downside is you're on your own for making StrongSwan highly available / redundant   We're in a spot where we'd gladly pay extra for the stability/simplicity that comes with the hosted solution versus us having to setup our own redundant strongswan VMs   I feel like its also unanimous by reading this thread that folks want the simpler implementation of IKEv2 on the MX line, instead of getting into the weeds of StrongSwan (or another appliance) ... View more

Re: Feature Request: IKEv2 Support in MX appliances

by TimW in Security / SD-WAN
‎11-07-2018 11:59 AM
1 Kudo
‎11-07-2018 11:59 AM
1 Kudo
@VinAllen wrote: Will a single S2S connection work for remote employees who currently VPN into the MX in order to access the network? A single s2s to Azure with employees coming into the Meraki will work just fine (prob some routes to configure in there, but nothing additional should be needed). I like to think I encompass the 80%er's of Meraki's line up. We love them. This thread is quite literally the only gripe I have about the MX line up 🙂 Best of luck! Consider looking into the AD Connect tool for syncing up identities into Azure (we went though a similar migration a while back)   ... View more

Re: Feature Request: IKEv2 Support in MX appliances

by TimW in Security / SD-WAN
‎11-07-2018 11:35 AM
1 Kudo
‎11-07-2018 11:35 AM
1 Kudo
@VinAllen Yes, while IKEv1 will work with a single S2S connection, it does not work for multiple S2S connections in Azure. If you want to connect multiple S2S connections into Azure, this setup either requires a software termination (strongswan, etc, ugh) which then terminates multiple static routes from the Meraki, or another piece of hardware, like an on-premise Cisco 891 that supports dynamic routes using IKEv2. Supporting IKEv2 dynamic routes to get a better OOB experience with multiple Meraki's + Azure would be ideal, since it would eliminate either 1) a virtual appliance thats needed to terminate static routes in Azure, or 2) additional on-premise hardware thats supports dynamic route-based vpns (specifically for folks with multiple s2s needs) ... View more

Re: Feature Request: IKEv2 Support in MX appliances

by TimW in Security / SD-WAN
‎06-07-2018 10:48 AM
1 Kudo
‎06-07-2018 10:48 AM
1 Kudo
Would love to see IKEv2 available on the Meraki's -- we have a need for this as well ... View more
Kudos from
User Count
ChrisStewart
ChrisStewart
1
VinAllen
VinAllen
2
View All
Kudos given to
User Count
NikolaiProniaev
NikolaiProniaev
1
View All
My Top Kudoed Posts
Subject Kudos Views

Re: Feature Request: IKEv2 Support in MX appliances

Security / SD-WAN
1 33671

Re: Feature Request: IKEv2 Support in MX appliances

Security / SD-WAN
1 33678

Re: Feature Request: IKEv2 Support in MX appliances

Security / SD-WAN
1 68403
View All
Powered by Khoros
custom.footer.
  • Community Guidelines
  • Cisco Privacy
  • Khoros Privacy
  • Cookies
  • Terms of Use
© 2023 Meraki