Re: Site-to-site VPN drops

Larry,

Just heard from the hosting provider that they have discovered "this is an
issue when we use Meraki + any vendor, if we use Meraki + Meraki then all
is good" which is pretty much what you said.

Not to mention your "And of course Cisco owns Meraki so you'd think....."

Yea, you would think they'd fix that.

Thanks, Larry.


On Mon, Jul 30, 2018 at 2:21 PM, DrFranken <midrange@xxxxxxxxxxxx> wrote:

Personally as the operator of of one of these services I will tell you
that when the 'far end' (that is not our end which is Cisco) is Meraki
there will be downtime. It will be exactly as you describe. Tunnel shows up
but it's not. DEtailed logs show the two ends are 'arguing' over that but
unless one end kills the link allowing a new negotiation it pretty much
stays down.

Recently (like last week) one of our clients finally gave up their Meraki
firewall and went back to their Fortigate. Been up ever since.

We connect to a wide variety of gear on the far end and the ONLY one with
issues is Meraki. Sometimes the link fails daily while other times not for
many days. We have added every change to both ends that Cisco and Meraki
have suggested but no long term joy.

And of course Cisco owns Meraki so you'd think.....


- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 7/30/2018 2:10 PM, Jeff Crosby wrote:

V7R3, IBM i is in the cloud (since March) and we connect via
site-to-site
VPN.

Three times now the site-to-site VPN has stopped working. Once several
months back, once on June 19, and once overnight last night.

Note that the Meraki router shows the VPN up. To the MSP provider it
appears it's up. Internet access is fine. I bounce the VPN and all is
well.

Any idea what may cause this? It's always been at least a month in
between
occurrences. So it would not appear (at least to me) to be a config issue
or it would happen more frequently. Something the ISP (Comcast) does?

Thanks.


--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD