<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Courier;
panose-1:2 7 4 9 2 2 5 2 4 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Has anyone gotten Shrew Soft to work with the Meraki MX line of devices? Been making the transition from Cisco ASA devices to Meraki MX devices and the only thing I have an issue with is that Meraki wants to use the built-in L2TP/PPTP client. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>According to <a href="https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Networking_Fundamentals%3A_IPSec_and_IKE">https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Networking_Fundamentals%3A_IPSec_and_IKE</a> it says ‘<i>Cisco Meraki uses IPSec for Site-to-site and Client VPN.</i>’ That sounds like to me that I should be able to use an IPSEC client to connect to the Meraki. I found some settings from the Meraki to SonicWALL site-to-site VPN page <a href="https://documentation.meraki.com/MX-Z/Site-to-site_VPN/3rd_Party_Site-to-Site_VPN_setup_for_Sonicwall">https://documentation.meraki.com/MX-Z/Site-to-site_VPN/3rd_Party_Site-to-Site_VPN_setup_for_Sonicwall</a> and was able to match up everything in Shrew. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Phase 1<o:p></o:p></p><p class=MsoNormal>Exchange: Main Mode<o:p></o:p></p><p class=MsoNormal>DH Group: Group 2<o:p></o:p></p><p class=MsoNormal>Encryption: 3DES<o:p></o:p></p><p class=MsoNormal>Authentication: SHA1<o:p></o:p></p><p class=MsoNormal>Life Time (seconds): 28800<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Phase 2<o:p></o:p></p><p class=MsoNormal>Protocol: ESP<o:p></o:p></p><p class=MsoNormal>Encryption: 3DES<o:p></o:p></p><p class=MsoNormal>Authentication: SHA1<o:p></o:p></p><p class=MsoNormal>Enable Perfect Forward Secrecy: False, the box should be unchecked<o:p></o:p></p><p class=MsoNormal>Life Time (seconds): 28800<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I can’t connect though. Says there is a Phase 1 mismatch on the Meraki. Here is the dump from VPN trace<o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ## : IKE Daemon, ver 2.2.2<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ## : Copyright 2013 Shrew Soft Inc.<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ## : This product linked OpenSSL 1.0.1c 10 May 2012<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ii : opened 'C:\Program Files\ShrewSoft\VPN Client\debug\iked.log'<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ii : opened 'C:\Program Files\ShrewSoft\VPN Client/debug/dump-ike-decrypt.cap'<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ii : opened 'C:\Program Files\ShrewSoft\VPN Client/debug/dump-ike-encrypt.cap'<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ii : rebuilding vnet device list ...<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ii : device ROOT\VNET\0000 disabled<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ii : device ROOT\VNET\0001 disabled<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ii : network process thread begin ...<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ii : pfkey process thread begin ...<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:24 ii : ipc server process thread begin ...<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : ipc client process thread begin ...<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 <A : peer config add message<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 <A : proposal config message<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 <A : proposal config message<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 <A : client config message<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 <A : xauth username message<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 <A : xauth password message<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 <A : preshared key message<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 <A : peer tunnel enable message<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : peer ref increment ( ref count = 1, obj count = 0 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : peer added ( obj count = 1 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local address 192.168.77.104 selected for peer<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : peer ref increment ( ref count = 2, obj count = 1 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : tunnel ref increment ( ref count = 1, obj count = 0 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : tunnel added ( obj count = 1 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : tunnel ref increment ( ref count = 2, obj count = 1 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : new phase1 ( ISAKMP initiator )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : exchange type is identity protect<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : 192.168.77.104:500 <-> X.X.X.X:500<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : 7afab2db07f7861a:0000000000000000<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : phase1 ref increment ( ref count = 1, obj count = 0 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : phase1 added ( obj count = 1 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : security association payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : - proposal #1 payload <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : -- transform #1 payload <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local supports XAUTH<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local supports nat-t ( draft v00 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local supports nat-t ( draft v01 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local supports nat-t ( draft v02 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local supports nat-t ( draft v03 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local supports nat-t ( rfc )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local supports DPDv1<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local is SHREW SOFT compatible<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local is NETSCREEN compatible<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local is SIDEWINDER compatible<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:navy'>15/08/18 20:15:29 >> : vendor id payload<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:29 ii : local is CISCO UNITY compatible<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:#005C5C'>15/08/18 20:15:29 >= : cookies 7afab2db07f7861a:0000000000000000<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:#005C5C'>15/08/18 20:15:29 >= : message 00000000<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:#208020'>15/08/18 20:15:29 -> : send IKE packet 192.168.77.104:500 -> X.X.X.X:500 ( 348 bytes )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : phase1 resend event scheduled ( ref count = 2 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:29 DB : phase1 ref decrement ( ref count = 1, obj count = 1 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:#208020'>15/08/18 20:15:34 -> : resend 1 phase1 packet(s) [0/2] 192.168.77.104:500 -> X.X.X.X:500<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:#208020'>15/08/18 20:15:39 -> : resend 1 phase1 packet(s) [1/2] 192.168.77.104:500 -> X.X.X.X:500<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:#208020'>15/08/18 20:15:44 -> : resend 1 phase1 packet(s) [2/2] 192.168.77.104:500 -> X.X.X.X:500<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:49 ii : resend limit exceeded for phase1 exchange<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:49 ii : phase1 removal before expire time<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : phase1 deleted ( obj count = 0 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : tunnel ref decrement ( ref count = 1, obj count = 1 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : policy not found<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : policy not found<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : policy not found<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : policy not found<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : removing tunnel config references<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : removing tunnel phase2 references<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : removing tunnel phase1 references<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : tunnel deleted ( obj count = 0 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : peer ref decrement ( ref count = 1, obj count = 1 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : removing all peer tunnel references<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:gray'>15/08/18 20:15:49 DB : peer deleted ( obj count = 0 )<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier;color:black'>15/08/18 20:15:49 ii : ipc client process thread exit ...<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:Courier'><o:p> </o:p></span></p><p class=MsoNormal>This is what the Meraki says:<o:p></o:p></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width=1440 style='width:15.0in;background:white;border-collapse:collapse'><tr><td nowrap style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Aug 18 20:17:23<o:p></o:p></span></p></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Non-Meraki / Client VPN negotiation<o:p></o:p></span></p></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>msg: failed to pre-process ph1 packet (side: 1, status 1).<o:p></o:p></span></p></td></tr><tr><td nowrap style='padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Aug 18 20:17:23<o:p></o:p></span></p></td><td style='padding:2.25pt 3.75pt 2.25pt 3.75pt'></td><td style='padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Non-Meraki / Client VPN negotiation<o:p></o:p></span></p></td><td style='padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>msg: failed to get valid proposal.<o:p></o:p></span></p></td></tr><tr><td nowrap style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Aug 18 20:17:23<o:p></o:p></span></p></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Non-Meraki / Client VPN negotiation<o:p></o:p></span></p></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>msg: no suitable proposal found.<o:p></o:p></span></p></td></tr><tr><td nowrap style='padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Aug 18 20:17:18<o:p></o:p></span></p></td><td style='padding:2.25pt 3.75pt 2.25pt 3.75pt'></td><td style='padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Non-Meraki / Client VPN negotiation<o:p></o:p></span></p></td><td style='padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>msg: phase1 negotiation failed.<o:p></o:p></span></p></td></tr><tr><td nowrap style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Aug 18 20:17:18<o:p></o:p></span></p></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Non-Meraki / Client VPN negotiation<o:p></o:p></span></p></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>msg: failed to pre-process ph1 packet (side: 1, status 1).<o:p></o:p></span></p></td></tr><tr><td nowrap style='padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Aug 18 20:17:18<o:p></o:p></span></p></td><td style='padding:2.25pt 3.75pt 2.25pt 3.75pt'></td><td style='padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Non-Meraki / Client VPN negotiation<o:p></o:p></span></p></td><td style='padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>msg: failed to get valid proposal.<o:p></o:p></span></p></td></tr><tr><td nowrap style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Aug 18 20:17:18<o:p></o:p></span></p></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>Non-Meraki / Client VPN negotiation<o:p></o:p></span></p></td><td style='background:#F2F4F5;padding:2.25pt 3.75pt 2.25pt 3.75pt'><p class=MsoNormal><span style='font-size:8.5pt;font-family:"Arial",sans-serif;color:#444444'>msg: no suitable proposal found.<o:p></o:p></span></p></td></tr></table><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Why not just use the Windows VPN client? I have more and more customers using the Meraki devices, I have 4 different machines I use, and I sync my ShrewSoft connection profiles between all those machines. Plus Shrew also scripts very well with RemoteDesktopManager. All those sync and I just click once to open VPN and then RDP to the server I need. It’s very handy. Rather not have to remember to set up a new connection on each computer every time a new Meraki comes online. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>-mv<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>