Re: Site-to-site VPN drops

Personally as the operator of of one of these services I will tell you that when the 'far end' (that is not our end which is Cisco) is Meraki there will be downtime. It will be exactly as you describe. Tunnel shows up but it's not. DEtailed logs show the two ends are 'arguing' over that but unless one end kills the link allowing a new negotiation it pretty much stays down.

Recently (like last week) one of our clients finally gave up their Meraki firewall and went back to their Fortigate. Been up ever since.

We connect to a wide variety of gear on the far end and the ONLY one with issues is Meraki. Sometimes the link fails daily while other times not for many days. We have added every change to both ends that Cisco and Meraki have suggested but no long term joy.

And of course Cisco owns Meraki so you'd think.....


- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 7/30/2018 2:10 PM, Jeff Crosby wrote:

V7R3, IBM i is in the cloud (since March) and we connect via site-to-site
VPN.

Three times now the site-to-site VPN has stopped working. Once several
months back, once on June 19, and once overnight last night.

Note that the Meraki router shows the VPN up. To the MSP provider it
appears it's up. Internet access is fine. I bounce the VPN and all is
well.

Any idea what may cause this? It's always been at least a month in between
occurrences. So it would not appear (at least to me) to be a config issue
or it would happen more frequently. Something the ISP (Comcast) does?

Thanks.