MERAKI MX AUTO-VPN

[romarroca]

Hi everyone,

I'm setting up a MERAKI mx85 for two sites and one of requirements if setting up site-to-site vpn connectivity on both sites. Do we need to have both MX to have static IP address as requirements for this to work?

Regards,

R

[Sheraz.Salim · Accepted solution]

Site-to-Site VPN with any vendor cisco/Maraki/palo-alto etc one site must have a static ip address. however, ideally would be great if both sides have static ip address.

with two sites having static ip address definitely works

[romarroca]

Thank you sir

[Philip D'Ath · Accepted solution]

No.  AutoVPN is cloud orchestrated.  Both sites can have a dynamic IP and it will work fine.

[romarroca]

Hi sir,

Thank you for the information. Should this still be working if the WAN ip address is getting a private DHCP address on both sides? Please see example below. I omitted some sensitive information.

On both sides

[Sheraz.Salim]

Look at this Link Here yes using the AutoVPN you can acheive this Phil was right.

[Philip D'Ath]

>Should this still be working if the WAN ip address is getting a private DHCP address on both sides?

Yes, although it is more reliable if the MX hub (the main site) as a specific port forwarded through to it (manual NAT traversal):

https://documentation.meraki.com/MX/Site-to-site_VPN/Automatic_NAT_Traversal_for_Auto_VPN_Tunneling_between_Cisco_Meraki_Peers