Interruptions on MX 67 network with Multiple Uplinks in Load Balancing

[eanderson]

Meraki Community,

I am fairly new to this space and am looking for some guidance in diagnosing an issue we have been seeing with users at one of our sights being intermittently disconnected from RDP sessions to a remote terminal server. There is nothing indicating a disconnection on the appliance itself, as it is showing 100% up time, however, I was able to see some events I can correlate to the same time of the RDP disconnections:

This occurred at the same time I was able to identify the RDP disconnections. The set up is fairly similar if not almost identical to the configuration we have at other sites, the main difference being the two WAN links in load balancing mode. I am unsure if something like that would cause this issue so I was hoping someone here may be much more educated than I, and help me in following this down the right path. This was set up way before my time here, and from what I here the disconnections have been happening for a long time, I had only just recently heard about it.

The two wan links are configured as below:

Thank you for any and all help on trying to follow this rabbit hole!

[PhilipDAth]

The last time I ran into this (early this year) it was a Windows Update.

https://www.bleepingcomputer.com/news/microsoft/july-windows-server-updates-break-remote-desktop-con...

[eanderson]

Thank you for the reply! The server that is being accessed by the users is also accessed by users at other locations. Though the only disconnections visible are from users at this specific site with this MX 67 appliance. We thought initially it might be a windows issue, but it only occurs to users at a specific location and not the others.

[PhilipDAth]

Is this using AutoVPN or a non-Meraki site to site VPN?

[eanderson]

It is the Meraki AutoVPN.

[Brash]

Makes sense that the RDP sessions disconnected if the AutoVPN dropped.

I suggest opening a Meraki support case to help go through it, but realistically it's going to be a job of correlation and isolation to determine where the issue is or might have been - in your network, in the ISP's network, in the Meraki VPN registry etc.

If you hit the issue again and it sustains for a little while, you can take a capture on the WAN interfaces of each side to determine where the packets are being lost.