Showing posts with label Meraki. Show all posts
Showing posts with label Meraki. Show all posts
Wednesday, March 18, 2020
VPN setup between Fortinet and Meraki - Part 2
Fortigate CLI on 5.6.12
config vpn ipsec phase1-interface
edit meraki1
set interface "port1"
set keylife 28800
set peertype any
set proposal 3des-sha1
set dpd disable
set dhgrp 2
set nattraversal disable
set remote-gw 64.65.66.67
set psksecret
end
config vpn ipsec phase2-interface
edit meraki1
set phase1name meraki1
set proposal aes256-sha1
set pfs disable
set keylifeseconds 28800
set src-subnet 10.111.0.0 255.255.255.0
set dst-subnet 10.222.0.0 255.255.255.0
end
config router static
edit 0
set dst 10.222.0.0 255.255.0.0
set device meraki1
end
Monday, October 23, 2017
VPN setup between Fortinet and Meraki
I have this working with several Fortigate models and Meraki MX.
Fortigate setup on 5.2. It also worked on 4.0 but the screens are different.
Ipsec Tunnels
Create New
Custom VPN Tunnel
Name xxx
IP Address from Meraki dashboard
select Interface
Uncheck Nat Traveral and Dead Peer
Enter Pre-Shared key
Remove all Phase 1 Proposals except "3DES SHA1"
Check only DH group 2
Change key life to 28800
Enter name for Phase 2
Enter local and remote subnets for Phase 2
Click Advanced
Remove all Phase 2 proposals except "3DES SHA1"
Uncheck PFS
Add static route for remote subnet
Add two firewall policies two allow traffic to and from tunnel.
The Meraki side is simple.
Site-to-site VPN.
Add non-peer.
Cable modem setup
(This was required on one Meraki unit but I have several working with no change to the cable modem.)
Forward ports 500 and 4500 to Meraki.
Update: VPN setup between Fortinet and Meraki - Part 2
Subscribe to:
Posts (Atom)