hi @GC1 The explanation is easy, I don't owe a GX50. My screenshot was from a VLAN on my GX20. But your screenshot helped a lot to understand your problem. In general there are two types of VPN connections 1st is site-2-site and the 2nd is client-2-server. From your screenshot, I assume you try to set up a client-2-server connection. Here are the few things I would do first: Please keep in mind it doesn't have to be like that for you 1. check your local VLANs -> Default VLAN 1 192.168.1.0/24 -> MyNetwork VLAN 10 192.168.10.0/24 -> Guests VLAN 100 192.168.100.0/26 2. You don't want to set the same Subnet for your client VPN as shown on the local page. I would chose 192.168.11.0. Depending on how many connections you plan to allow limit the subnet: /24 will give you 253 addresses, /26 only 61 and /29 only 5 possible addresses. 3. DNS Provider can be Google or any other. In my understanding it is not relevant for the VPN connection. 4. Where is the VPN server located, is it behind a firewall or is it directly connected to the internet. If it is directly connected all ports are open to the internet. They are "open" or better said listening. If a legit request is sent to a port it will be accepted, otherwise it will be dropped. If it sits behind a firewall, you'll have to forward port UDP 500, UDP 1701 and UDP 4500 to the GX50. 5. Add the User or Users you want to allow to access over VPN. There's some reporting the User has to be an Admin to make it work. 8 characters for a shared secret is a joke imho. Make it at least 20+chracters long, use numbers, upper- and lowercase letters and punctuation, make it as complicated as you can. 6. By now your server should be ready to accept VPN connections. 7. Device setup: If you want to connect with a newer Android Phone or tablet, you're out of luck. Android requiers L2TP/IPSEC IKEv2. The GX50 supports only IKEv1. But for anything else you can follow the instructions given by Meraki Go. Well almost... they didn't tell you, you have to edit your Registry on any Windos PC to make it work, google AssumeUDPEncapsulationContextOnSendRule, I won't go into details here, but you'll find lots of help on the google-search. 8. L3 Firewall Rules I am not 100% sure about this, but you might have to add a rule that will allow connections from client VPN 192.168.11.0 to "MyNetwork" 192.168.10.0 . After doing all this, you should be able to connect. If not please come back, I'll try to help.
... View more