HOW TO CONNECT TO WATCHGUARD VPN SERIES

If Custom IPsec Policies have been configured in Dashboard, please be sure to use those phase 1 and 2 parameters in Watchguard.īack on the Gateway page, select the tab Phase 1 Settings and ensure that Main is selected in the drop down menu labeled Mode. Note: This section walks through configuring a site-to-site VPN tunnel on the Watchguard XTM, assuming the Cisco Meraki peer is using its default IPsec policy. Under the section for Gateway ID for Tunnel Authentication select By IP address and again enter the public IP of the MX security appliance. Under the section labeled Remote Gateway, select the radio button for Remote Gateway Static IP Address and enter the public IP address of the MX security appliance. Please note that this must be the IP address of the primary interface shown on the MX under Security & SD-WAN > Monitor > Appliance status > Uplink > Configuration > General > Public IP. Under Local Gateway, select the radio button for By IP Address and enter the public IP address of the Watchguard. In the Gateway Endpoints section, click the Add button to be brought to the Gateway Endpoint Settings page to specify the local and remote peers participating in the VPN tunnel. If the MX is sitting behind a device performing NAT, the Remote IP will be the public address of the MX, while the Remote ID will be the private address.

Under the General Settings tab, select the radio button for Pre-Shared Key and enter the key string exactly as it appears on the MX under Security & SD-WAN > Configure > Site-to-site VPN > Organization-wide settings > Non-Meraki VPN peers > Preshared secret. Under the Gateways tab, click Add and give the gateway an appropriate name: On the left hand side, click on VPN->Branch Office VPN.

To do this, log in to Watchguard by connecting to its IP address via a web browser.

HOW TO CONNECT TO WATCHGUARD VPN SERIES

The Watchguard XTM can form a site-to-site VPN with a Meraki MX series security appliance.

How to connect to watchguard vpn