Graceful or Immediate WAN failover for non-Meraki site-to-site VPNs?

New here

Graceful or Immediate WAN failover for non-Meraki site-to-site VPNs?

Does anyone know which setting for WAN failover works best when dealing with a non-Meraki VPN? Graceful or immediate?


I can't find documentation on what the appliance will do with the VPN tunnel, whether it waits during graceful mode to restart tunnel negotiation using the secondary link as it would an existing flow.


In the past, I've had issues where a fail-back from the secondary WAN to the primary that's too quick (<1-2 min) will result in stale security associations on the third-party appliance and a failure to rebuild the tunnel to my primary WAN.


I'm curious if the feature makes any difference in this scenario.

1 Reply 1
Kind of a big deal
Kind of a big deal

For non-Meraki VPNs, there isn't much to do, the failover has to be manual since you can't do a PBF on the MX.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.