- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Impact of Adding a New Subnet to a Site-to-Site VPN
Impact of Adding a New Subnet to a Site-to-Site VPN
I have a question regarding the Site-to-Site VPN.
I have a VPN established with a non-Meraki device, and I need to add a new subnet to allow access.
When I add this subnet and apply the configuration, do I lose communication with the Meraki device for a few moments? If not, does it have any impact?
Solved! Go to solution.
- Labels:
-
Firewall
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @Maccssilva , welcome to the Meraki Community!
When you add a subnet to the VPN you won't lose communication with the Meraki device.
The only impact you might experience is a brief VPN tunnel flop since it has to renegotiate. You might not even notice it.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you're simply changing the VPN Mode from disabled to enabled, you shouldn't lose connectivity with the device.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Theoretically it shouldn't cause any problems, but if I were you I would do it during a scheduled maintenance window in case of any unforeseen circumstances.
Please, if this post was useful, leave your kudos and mark it as solved.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @Maccssilva , welcome to the Meraki Community!
When you add a subnet to the VPN you won't lose communication with the Meraki device.
The only impact you might experience is a brief VPN tunnel flop since it has to renegotiate. You might not even notice it.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Remember that if you are going from one subnet to more than one subnet, check which IKE version you are using, if IKE V2 then you may run into trouble, depending on what the other end is.
