Can anyone help me understand what's going on here? Yesterday, we received over 300+ emails regarding our site-to-site VPN connectivity. I looked at all of our networks and only found one whose ISP might have been experiencing some packet loss but I couldn't find anything conclusive. Naturally, these alerts bring about cause for concern but I'm not well-versed enough in networking to understand and explain the root cause.
We have 4 offices across the US and a vMX in AWS. Two offices have MX64Ws and two have MX84s. In looking at the event log for my office, I see the following (I've removed IP addresses)
The IP addresses were my public and what I can only assume is the next hop to the carrier (same county, different city). The "expired" messages are concerning but realistically, there's no discernible impact to any of the interconnected offices when these alerts are firing off.
I'd appreciate any help and insight anyone can provide. Is there maybe a parameter we can increase if this is a timeout/heartbeat issue? These alerts may be causing undue stress.