Re: Site-to-site VPN drops

[DrFranken <midrange@xxxxxxxxxxxx>]

Personally as the operator of of one of these services I will tell you 
that when the 'far end' (that is not our end which is Cisco) is Meraki 
there will be downtime. It will be exactly as you describe. Tunnel shows 
up but it's not. DEtailed logs show the two ends are 'arguing' over that 
but unless one end kills the link allowing a new negotiation it pretty 
much stays down.

Recently (like last week) one of our clients finally gave up their 
Meraki firewall and went back to their Fortigate. Been up ever since.

We connect to a wide variety of gear on the far end and the ONLY one 
with issues is Meraki.  Sometimes the link fails daily while other times 
not for many days. We have added every change to both ends that Cisco 
and Meraki have suggested but no long term joy.

And of course Cisco owns Meraki so you'd think.....


        - Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 7/30/2018 2:10 PM, Jeff Crosby wrote:
>   V7R3, IBM i is in the cloud (since March) and we connect via site-to-site
> VPN.
>
> Three times now the site-to-site VPN has stopped working.  Once several
> months back, once on June 19, and once overnight last night.
>
> Note that the Meraki router shows the VPN up.  To the MSP provider it
> appears it's up.  Internet access is fine.  I bounce the VPN and all is
> well.
>
> Any idea what may cause this?  It's always been at least a month in between
> occurrences.  So it would not appear (at least to me) to be a config issue
> or it would happen more frequently.  Something the ISP (Comcast) does?
>
> Thanks.