![]() Active-active Auto VPN allows you to create a VPN tunnel with flow preferences over both the uplinks. If you have two uplinks on your MX, Auto VPN as a component of SD-WAN allows you to decide the flow preferences within the VPN tunnel under Security & SD-WAN > Configure > SD-WAN & Traffic Shaping page > Uplink Selection > Active-Active Auto VPN. It has automatic VPN route generation using the IKE/IPSec-like tunnels and all this is done in the Meraki cloud. It gives resilience, security and application optimization. It takes only a few clicks and makes it easy to deploy and manage an SD-WAN environment. Meraki dashboard & API configuration interfacesĪuto VPN, as a component of SD-WAN, transitions the manual steps for setting the VPN tunnel into a simple automated process. Simple WAN Configurations Interface (Must support zero-touch provisioning at a branch, should be easy to set up) MX devices can perform uplink load balancing across WAN connections MX uplink options allow for multiple connection type.ĭynamic path selection (allows for load sharing across WAN connection) Multiple connection types (MPLS, Internet, LTE, etc.) ![]() The status of each MX is displayed, along with their exported subnets, latency, connectivity and routing decisions that are being made over the Auto VPN domain in near real-time. The VPN connection can be monitored under Security & SD-WAN > Monitor > VPN Status page. Destination UDP port 9350 or UDP port 9351.Every MX stores this information in a separate routing table. ![]() Finally, the dashboard will dynamically push VPN peer information (e.g., exported subnets, tunnel IP information) to each MX. During this process, VPN routes are pushed from the dashboard to the MXs. The cloud pushes a key to the MXs in their configuration which is used to establish an AES encrypted IPsec-like tunnel. Local subnets specified by dashboard admins are exported/shared across VPN. The Meraki cloud already knows the subnet information for each MX, and now the IP addresses to use for tunnel creation.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |