PowerShell scripts for setting up Meraki Client VPN on Windows 10
Windows 10 doesn't like to play nice with the Meraki client VPN, especially when following Meraki's own setup instructions.
These scripts attempt to:
- Pre-emptively fix issues with NAT-Traversal. Commonly pops up when clients use cellphone hotspots.
- Simplify creating a split tunnel connection.
- Prevent Windows from authenticating to network resources with the VPN credential.
- Create a rasphone desktop shortcut. It seems to behave better, and users find it easier to enter credentials into.
- Create the connection for all users. Especially useful for shared laptops or users prone to Windows user profile corruption.
- Set the VPN interface's metric to 1, so that the PC will use the VPN's DNS preferentially. Avoids problems where the local domain is the same as a public domain.
TIP: Remind your end users to not save their VPN password. Saving credentials can trigger the password protocol to change.
Please read the comments on the scripts before running them.
AddMerakiVPN_Prompts.ps1: Handy when you administer multiple Meraki client VPNs, such as at an MSP's help desk.
It will prompt for:
- VPN connection name. A new name will create a new connection. An existing name prompts for permission to delete and recreate.
- VPN concentrator address
- Pre-shared key
- Routes if you pick split tunnel.
AddMerakiVPN.ps1: Edit the variables in the script yourself and then run. Good for large deployments.