Configuring Meraki vMX (Azure) Site to Site VPN with MX67W - SDWAN

[@eschete5]

Thanks for making this video. Any guidance on setting up the virtual network ? I can ping the vmx from my local network. I am having issues after I create a virtual machine and having that see the VMX and also my local network

[@dracocybersecurity]

Did you create the Virtual Machine in the existing subnet that you have configured during the provisioning? If you have follow closely from 14min to 23min of the video it will work. However any deviation from the standard steps then you will need to tweak the routing and route table of Azure this becomes complex for me as I am not an expert in Azure Networking, unlike Linux/AWS the Azure Routing is not easy to troubleshoot. I had issue during the video creation when I create the Subnet after the vMX creation and also creating the Virtual Machines in another subnet. I am assuming that if you are doing ping you have allowed ping on the Windows virtual machine and if you have not done any changes to the RDP of your Windows VM you have tried to RDP from your local network machine to the Windows Virtual Machine and the basic interesting traffic are not in conflict. Do let me know if you manage to get it to work :) with the basic steps. If you let me know without sharing sensitive information on how your setup looks like I can try to see if I can check out in my setup what you can do to get it to work. Or talk to your local Meraki expert. Do note that in my view Meraki is really great for its simplicity and scalability but any complex setup you will need to do your feasibility assessment base on your needs.

[@eschete5]

@@dracocybersecurity After configuring for a week now. I finally figured it out with your comment above. The drop down menu had cached old Virtual Networks and the new ones that I had created were not showing up. I opened a different browser and in the drop down my new virtual network with the correct subnet showed up. Everything works correctly. Thanks for the video. Only recomendation would be to setup a new virtual network in the video and show how it was done if anyone is new to working in azure

[@dracocybersecurity]

Great that you manage to get it to work. cache on the browsers have their way of tripping us :). thanks for the feedback on showing the creating the new virtual network. That can be daunting for people new to Azure. I am still learning subnetting and the network gateway in Azure as well. wish that there is more consistency in network deployment in the cloud providers :) I am starting to like the simplicity of Oracle Cloud in their way of networking not much advance stuffs but the basic routing and VPN are a lot easier. wondering when vMX will be extended to them. when I get time I will do a video on vMX in AWS. that is a lot easier since more Linux style VPS. if you have a chance try out the whole setup for vMX on Azure and AWS and a few locations of hardware boxes. It is amazing for simple development need and management. but cost can be a concern for testing.

[@eschete5]

@@dracocybersecurity thanks for your help and making the video. I will check out AWS

[@majorblazer9055]

@@dracocybersecurity Hey mate waiting for video for AWS Vmx, I need to deploy this for work.

[@EekamSix]

Hi Draco , Thank you so much for this Great!!! tutorial, Had a question - 1) if i have to upgrade from Azure vmx-100 to vmx-M, do i have to re-deploy vmx-M on Azure again even though my license has 1 more month left to expire, can i just not transfer the license from vmx-100 to vmx-M ? and 2) we have multiple Site-to-Site locations , can i redploy vmx-M with peering 1 site at a time or do i have to deploy all the multiple Sites in one time all in one day? The reason im asking is because our cutomer is only OFF on Sundays and they work 18 hours daily :)

[@dracocybersecurity]

community.meraki.com/t5/Security-SD-WAN/Azure-vMX100-transition-to-vMX-M/m-p/109509 you can check out this link seems that you have to recreate a vMX-M instance if you are on vMX 100. I would recommend to get in touch with your local Meraki team or raise a case to discuss your need.

[@EekamSix]

@@dracocybersecurity Thank you so much!