AutoVPN key lifetime question

[Chema-Spain]

Hi,

In any SDWAN solution, the orquestrator provides SDWAN devices with the necessary "session keys" to establish data tunnels among them.

In AutoVPN, I would like to know the expected behaviour in a concrete situation:

I suppose those keys have a valid lifetime. What happens in case a MX is unregistered but its data plane is working fine when its key lifetime ends? How long can I expect AutoVPN could work without contacting to the Meraki cloud platform?

Sorry if this topic has already been discussed here. I took a quick look and found nothing.

Thanks!

[Brash · Accepted solution]

When you say unregistered, are you meaning unlicensed/unclaimed?

I don't know the answer but it seems to me that would be a very niche scenario.

For example, if the MX loses connectivity to the Meraki cloud but maintains site-to-site connectivity for whatever reason, it will reboot within 8 hours anyhow, causing the site-to-site vpn to go down.

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Behavior_during_Conne...

[Chema-Spain]

Thanks Brash.

That is exactly what I wanted to know. 8 hours.

Unregistered means not accesible from the dashboard. This could not be such a corner case scenario. An internal meraki issue with device registration or a DNS attach could cause Org MX to lose control plane without losing data plane.

Thanks for your help.