yes, I know that Meraki allows all traffic. The problem is that the provider's router is not in bridge mode. If you look, the communication goes through a private IP (the default gateway router). It's possible that the provider doesn't have port forwarding configured and is not allowing . .  ... View more

Okay, but could you confirm if it is possible to change the setup in Meraki so that the router is in NAT mode? Also, how can I know if the Meraki router is blocking UDP port 500 for the IPsec tunnel ... View more

  Hi again, Is it possible to configure the Meraki in "like indicator" mode? I would like to perform the initial setup with a FortiGate device. However, I can't find the "Non-Meraki peer" option—only the IPSec VPN option is visible. My concern is that the Meraki device receives a private IP address on its WAN interface, and I suspect there might be an issue on the provider's side with UDP port 500. It's quite difficult to contact the provider to either set the router to bridge mode or to forward port 500 to the private IP. Current setup: Public IP: 81.x.x.x.x Hostname: 56.red-81--tde.net WAN 1 Settings: Type: IPv4 Dynamic Status: Active IP Address: 192.168.1.37 Gateway: 192.168.1.1 DNS: 80.x.x.x, 80.x.x.x IPv6: Auto (Stateless), Not Active Given this, I’d like to know if I can configure the FortiGate with a dynamic  and specify a set local ID, and still get the VPN tunnel to work. ... View more

any idea?   ... View more

So what is your idea, how can I do it? The VPN is a tunnel and first I should establish the IPsec tunnel on the Meraki, or maybe I am wrong and I must check the FortiGate. Any idea for doing it? If on the customer side, they do a tracert or ping against public IP on the other side, the FortiGate receives the reply, but I can't see any traffic on port 4500 and 500 UDP. On the other hand, I can see traffic for other public IPs, but I can't see it for that specific IP ... View more

Hi, thanks for your reply. I did the packet capture on both sides - the host with public IP and the other side - and I did not have any traffic ... View more

where in my custumer side or my side  ... View more

If I do the packet capture on the customer side, I don't get anything           ... View more

@alemabrahao  thanks for your reply So, if I understand this correctly, the Client VPN subnet is just the IP range that will be assigned to a client when they connect through this VPN. Is that correct? ... View more

yes dhcp is enable in vlan 1 ... View more

So let me undestand    Now is set up like this :     If i understand weel i need to set up like this:       ... View more

The issue is with vlan 1, and vlan 2 is working fine. I believe the issue is with a native vlan 1           ... View more

You are right , thanks  ... View more

let me check ... View more

Nop , there is no two gadget with the same IP . How may two IP addresses with the same address be assigned by a DHCP?             ... View more

I've solved the  radius issue adding /24 .   ///////////////////////////////////////////////////////// The next step is moving this DHCP on one FW to other FW  For testing i moved one AP but i got this resoult As wll i cant see in the box the radius ok .             like this           ... View more

Hello   This range is theoretically configured by the NPS for the Meraki AP.     With this IP range, the FW MGMNT   VLAN 5 10.129.5.1 / 255.0.255.255   DHCP RANGE 10.129.5.2-254     I'm not sure how it operates. I believe that the radius setup should have the following range. how is possible are there in green ? In NPS there is a /25   Maybe  i will have to change  in the NPS to /24   ... View more

Hi    I dont have MX i have a fortinet FW  ... View more

Let me check     from the server to the AP I am trying to get an IP address, but I am not able to ping. Perhaps this is due to policies. I get the same result i get to reach GW same result    ... View more

Hello, Phillis Yes, I do realize that. Maybe I'm not understanding, but the IP address of the ACCES point seems to be connected via Raius when you enter the radius NPS, doesn't it?   I am unable to see the address in the Radisu NPS. VLAN 5 10.129.5.1 / 255.0.255.255 This is the firewall that has the DHCP setup.   The configuration for in the NPS radius is 10.129.5.128/25.   The hole range 24 is the APS's ip. i dont know if i explain weell , but i cant understand ... View more

Why some APps are in orange with the Radius issue is beyond me. they are all inside the range of 2-127, they are not within the range is the NPS range radius is 10.129.5.128/25. All of them AP´s would have in orange colour . isent it?             ... View more