Cisco Meraki Ssl Vpn

Posted By admin  On 01.05.21



Cisco Meraki’s unique auto provisioning site-to-site VPN connects branches securely with complete simplicity. Using IPsec over any wide area network, the MX links your branches to headquarters as well as to one another as if connected with a virtual Ethernet cable. Cisco meraki ssl VPN: The best for many people in 2020 DNS is a better option due to its lightweight nature. Finally, we review how easy the apps are to use, and test the services off desktop and mobile devices. The Cisco Meraki MX is a cloud-based security & SD-WAN appliance with fully integrated networking and security features such as an enterprise-class stateful firewall, deep layer 7 application visibility and control, dynamic VPN path selection, WAN load balancing, automatic VPN. Don't try to use the Cisco Meraki MX for all your VPN needs. Excellent at user to site VPN support using AnyConnect SSL VPN with medium complexity. Cisco IOS/IOS-XE Router.

Recently I received a Cisco Meraki Z3 from my work to be used at home as a teleworker gateway. If you don’t know what a Meraki Z3 it’s a teleworker gateway that provides enterprise-class firewall, VPN gateway and router all in one.

My coworkers that work with Cisco Meraki day in a and day out love this equipment.

In this article, we are going to create a site to site VPN with the Meraki Z3 and Azure VPN gateway.

The following steps are completed in PowerShell and take roughly 45 minutes to complete due to the creation time required for the VPN gateway.

Create Resource Group

Create a new resource group in your Azure subscription.

Create vNet and Subnets

Create a virtual network with two subnets. The first subnet called “default” is where your endpoints in Azure will reside. But you need to create another subnet called “GatewaySubnet”, it must be this name, or else Azure won’t treat it as a subnet gateway.

Create local network gateway (on-premise)

Create the local network gateway which specifies the specifics of your on-premises location. In the case of this example, my lab has three subnets I want to expose. The GatewayIpAddress parameter refers to your public IP address for your on-premises location.

Create Public IP address

Create the public IP address for your VPN gateway to be able to communicate back to your on-premises location.

Create the VPN Gateway Connectivity

Create the VPN gateway connectivity by assigning the subnet and public IP address.

Cisco Meraki Ssl Vpn Review

Create the VPN gateway

We will combine all the previous steps to create a VPN gateway. Building a VPN gateway can take some time to complete, for me, it took on average 30 minutes to complete.

Configure the connection

Create and configure the connection between Azure and your on-site router. I used the cmdlet New-Guid to randomly generate a PassPhrase and output me the results so that I can use it in the next step to configuring pfSense.

Cisco Meraki Ssl Vpn

Configure site-to-site VPN

  1. Login to your Meraki dashboard https://dashboard.meraki.com
  2. Go to Teleworker gateway and select site-to-site VPN
  3. On the site-to-site VPN page, under type select Hub (Mesh)
  4. Further down on the page, under VPN settings, select the appropriate local networks that will be available for the VPN connection.
  5. Continuing on the same page, under Organization-wide settings, Add a peer.
  6. The non-Meraki VPN peers will appear and add the required information:
    • Name: provide name for the connection
    • Public IP: public IP of the Azure VPN gateway
    • Private subnet: Azure virtual network address space (do not enter individual subnets)
    • IPsec policies: click on default and change the preset to Azure
    • Preshared secret: enter the preshared key you used to create the Azure VPN gateway.

Verify connectivity

  1. Go to Teleworker gateway and select VPN status
  2. Go to Non-Meraki peer, ensure the status color is green.
  3. If the status is not green, go to the event log to troubleshoot.

Cisco Meraki Ssl Vpn Free

I ran into a few issues during the setup and here are some of the errors I did and how I corrected it.

  1. Azure VPN gateway was set to route-based. I had to delete the VPN gateway and recreate the gateway with the VPN type as Policy-based
  2. When configuring the site-to-site VPN on the Meraki dashboard, ensure the private subnets equals the address space configuration for your Azure virtual network.

We love the Cisco Meraki VPN at Telnexus. The MX security appliance is a powerful guardian and gateway between the wild Internet and your private Local Area Network (LAN). Here are the abbreviated instructions on how to connect your PC or Mac back to home base.

Meraki Documentation Link

For complete instructions as well as instructions for other versions of Windows and MacOS as well as Linux, iOS and Android, please consult the official Meraki documentation:

VPN Credentials

You should receive the following bits of information from your administrator:

Meraki
  • IP address or hostname of your VPN server
  • A “Preshared Key”
  • Your username
  • Your password

Windows 10 Meraki VPN Setup

Cisco meraki vpn troubleshooting

Here are the basic steps:

  1. Go to Settings->Network->VPN
  2. Create a new L2TP/IPsec VPN
  3. Name it “My Company VPN”
  4. Enter the Server Address
  5. Enter the Preshared Key
  6. Enter your Username and Password
  7. Complete the new VPN wizard
  8. Select Adapter Options
  9. Right-click on your new VPN, select Properties
  10. Click on the Security tab, and then click “Allow these protocols”
  11. Under “Allow these protocols” make sure “Unsecured password (PAP)” is the only one checked
  12. Click OK to close the Properties box
  13. Right-click on the new VPN icon and select Connect
  14. Click Connect (again) in the Settings->Network->VPN window

Cisco Meraki Ssl Vpn Client

For full documentation with screenshots please check the official Meraki documentation.

MacOS Meraki VPN Setup

Here are the basic steps:

Cisco
  1. Open System Preferences > Network from Mac applications menu. Click the “+” button to create a new service, then select VPN as the interface type, and choose L2TP over IPsec from the pull-down menu.
  2. Enter your server address in Server Address
  3. Enter your Meraki username in Username
  4. Click Authentication Settings
  5. Enter your Password in box the User Authentication section
  6. Enter your Preshared Key in the Shared Secret box
  7. Click OK to close the Authentical panel
  8. Click Apply to save your settings
  9. Click Connect to activate your VPN

Meraki Ssl Vpn

For full documentation with screenshots, please check the official Meraki documentation.

Cisco Meraki Ssl Vpn Login

Related Posts