topic Re: MERAKI MX AUTO-VPN in Network Security

MERAKI MX AUTO-VPN

cisco_newbie2 — Mon, 11 Jul 2022 15:04:00 GMT

Hi everyone,

I'm setting up a MERAKI mx85 for two sites and one of requirements if setting up site-to-site vpn connectivity on both sites. Do we need to have both MX to have static IP address as requirements for this to work?

Regards,

Re: MERAKI MX AUTO-VPN

Sheraz.Salim — Mon, 11 Jul 2022 21:04:03 GMT

Site-to-Site VPN with any vendor cisco/Maraki/palo-alto etc one site must have a static ip address. however, ideally would be great if both sides have static ip address.

with two sites having static ip address definitely works

Re: MERAKI MX AUTO-VPN

Philip D'Ath — Tue, 12 Jul 2022 02:41:06 GMT

No. AutoVPN is cloud orchestrated. Both sites can have a dynamic IP and it will work fine.

Re: MERAKI MX AUTO-VPN

cisco_newbie2 — Tue, 12 Jul 2022 06:37:27 GMT

Thank you sir

Re: MERAKI MX AUTO-VPN

cisco_newbie2 — Tue, 12 Jul 2022 20:35:22 GMT

Hi sir,

Thank you for the information. Should this still be working if the WAN ip address is getting a private DHCP address on both sides? Please see example below. I omitted some sensitive information.

On both sides

Re: MERAKI MX AUTO-VPN

Sheraz.Salim — Tue, 12 Jul 2022 21:22:56 GMT

Look at this Link Here yes using the AutoVPN you can acheive this Phil was right.

Re: MERAKI MX AUTO-VPN

Philip D'Ath — Tue, 12 Jul 2022 21:56:22 GMT

>Should this still be working if the WAN ip address is getting a private DHCP address on both sides?

Yes, although it is more reliable if the MX hub (the main site) as a specific port forwarded through to it (manual NAT traversal):

https://documentation.meraki.com/MX/Site-to-site_VPN/Automatic_NAT_Traversal_for_Auto_VPN_Tunneling_between_Cisco_Meraki_Peers