Auto VPN Port Change
Frequently Asked Questions
1. Why are the Auto VPN ports changing?
As part of our continued efforts to maximize performance and resiliency of the Meraki cloud platform, we will be updating the VPN registry endpoints used by MX, vMX, and Z devices to create an Auto VPN fabric. By expanding the VPN registry endpoints, you will benefit from increased resiliency with VPN registry load balancing. If you have large-scale Auto VPN deployments, this will further improve reliability.
As a result of this change, you will need to update your upstream firewall rules to allow these devices to maintain connectivity.
2. What should I do to avoid reliability issues and Auto VPN failures?
Any devices sitting upstream of an MX will need the following destinations whitelisted so the MX can communicate with the Auto VPN registries:
IP range for non-China cloud (Meraki dashboard login via meraki.com):
IP range for China cloud (Meraki dasboard login via meraki.cn):
For more detailed information about how to update your upstream firewall rules, please see our Auto VPN Configuration and Troubleshooting documentation.
3. How can I identify which MXs in my deployment need updating?
If you see a dashboard banner requesting to update firewall rules, the corresponding device will be impacted. Please ensure you update the upstream firewall rules on affected devices to comply with the new changes.
Dashboard banner example:
You can also leverage the Firewall Info page to self-check if any of your devices require you to update your upstream firewall rules.
4. What happens if I don't update?
If no action is taken before the cutover date on January 30, 2024, you will experience reliability issues and Auto VPN failures in your organization.
5. I updated my firewall rules today. Why am I still seeing the dashboard banner?
Once your firewall rules have been updated, it may take up to 48 hours for the banner to disappear. If you are still seeing the banner 48 hours after your firewall rules have been updated, please reach out to Meraki Technical Support for assistance.
6. Where can I go if I need additional assistance?
If you have additional questions or need assistance, please contact Meraki Technical Support.
There are three ways you can contact Meraki Technical Support:
Open a case via Meraki dashboard,
Call your localized support line, which can be found at the bottom of the Meraki Technical Support webpage.