topic Re: IPSEC termination in Cloud Networking Platform

IPSEC termination

Ash24 — Thu, 13 Feb 2025 08:21:27 GMT

Hi!

Currently I am using Fortiwifi 61F as my security appliance. I will migrate this to MX250. Can I replicate all my current configuration in my current setup into MX250.

Where to terminate my IPSEC? is it site-to-site vpn?

Thank you in advance for your response!

Re: IPSEC termination

Karsten Iwen — Thu, 13 Feb 2025 10:06:59 GMT

The MX is highly restricted when it comes to extranet IPSec-VPNs, and many other features are just a little bit "different" from those of other vendors. Make yourself very comfortable with the MX before making this purchase.

Re: IPSEC termination

Vivek5 — Thu, 13 Feb 2025 16:58:14 GMT

Hello,

Please refer to this.

https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings

Re: IPSEC termination

Ash24 — Tue, 18 Feb 2025 13:41:44 GMT

Thank you! I will study more on this

Re: IPSEC termination

ChrisJ21 — Tue, 01 Apr 2025 08:10:41 GMT

Hi Ash,

Welcome to the Meraki Community! 😊

Site-to-site VPN settings are managed on the Security & SD-WAN > Configure > Site-to-site VPN page, and 3rd-party peers are located in the Organization-wide settings section. When configuring a peer, you can modify the IPsec policy settings by clicking the three dots on the right side. In the window that appears, a number of options are available.

The Preset selection allows easy setup of peers for some popular services, such as Azure and AWS. "Default" will reset the parameters to those used between Cisco Meraki peers, and "Custom" can be used for non-standard configurations, and this should enable you to replicate your existing VPN configuration.

Further details can be found here.

Some terminology may be a little different, eg Local ID of this MX. This is an optional configuration and is what the remote peer will receive as the remote ID of this MX, and is only available with IKEv2 tunnels. If left blank (default) it is the uplink IP of the MX, not the public IP. Some peers may expect this to match the public IP of the MX, and you can enter this here, if required.

If you run into any issues with your initial setup, please free to open a case from Support Center in your Meraki dashboard, and an NSE will be happy to assist!