Hello, bouncing from ISP assistance to Meraki assistance and banging my head versus the wall with this.
The ISP has Juniper equipment with a Hughes Net modem and have actually provided x.x.x. 84/30 to the setup. x.x.x. 85 is the modem, x.x.x. 86 is the functional IP for the firewall program, x.x.x. 87 is the broadcast.
The LAN port on the modem has DHCP, ip: x.x.x. 86, Gateway: x.x.x. 85, Mask: 255.255.255.252
The WAN port on Meraki is set up as vibrant, however is revealing some clashing information: https://i.imgur.com/VaIrq9D.png. In one area the WAN1 IP is revealing as x.x.x. 85, and likewise the DDNS hostname of the Meraki solves to x.x.x. 85, which is the modem or it'' s default entrance. These ought to all be x.x.x. 86
It does have connection, and I can reach its status page by IP x.x.x. 86 if I include my own public IP to the enable list. Meraki Client VPN is stopping working from any customer. I'' ve done some package traces from my own Meraki, this Meraki and even did one with the ISP on the modem while attempting to link, the something they all reveal is that customer connects on 500 and 4500, Meraki reacts on 500 however 4500 is inaccessible: https://i.imgur.com/8cSYTxq.png (the.120 is my own public IP). According to the ISP all ports are allowed/forwarded.
One other odd thing is the Meraki is doing ARP ask for it'' s own IP with “” inform 0.0.0.0″”: https://i.imgur.com/0gyCMUc.png which might involve the strange ISP setup.
I believe all the pieces are here however a few of this is simply beyond me to find out what particularly to inform the ISP. I'' m relatively particular it involves their setup, we have lots of Merakis consisting of a number of at remote places like this with satellite or LTE modems that have a vibrant WAN IP with a public address, however they are typically on/ 29 or/ 28, not/ 30. If we might alter the IPSEC port to something else, the ISP has actually not been practical and at one point asked. Meraki assistance hasn'' t been fantastic either, the assistance associate had actually never ever seen a vibrant port with a public IP and stated they couldn'' t assistance unless we plugged a windows computer system into the modem and revealed them the IP it got.
Read more: reddit.com