MX disconnects all VPN connections after changing things

Robin777
Conversationalist

MX disconnects all VPN connections after changing things

Hello all,

we have connected to one branch 10 IPSec connections.

After changing something in the Non meraki VPN config, ALL IPSec connections are disconnected.

I cannot understand this behaivor.... do you have the same problems?

 

Best regards

Robin

6 Replies 6
ww
Kind of a big deal
Kind of a big deal

What change?

On some changes it resets wan interfaces (according to the documentation)

https://documentation.meraki.com/MX/Monitoring_and_Reporting/Appliance_Status/MX_Uplink_Settings#Sec...

 

"

Note: Modifying the following items will result in WAN interfaces being reset.

  • State (enabled/disabled) of any WAN interface
  • Addressing method (static/DHCP) of any WAN interface
  • State (enabled/disabled) of any LAN interface

This will result in a loss of connectivity on both Internet uplinks for up to 2 minutes. Therefore, it is recommended to only make changes during a planned maintenance window so that disruption is minimal. "

Robin777
Conversationalist

Hello @ww ,

editing non Meraki VPN connections interrupts all non Meraki peers.

ww
Kind of a big deal
Kind of a big deal

"Making changes to Non-Meraki VPN settings under Security & SD-WAN > Configure > Site-to-site VPN, might result in existing Non-Meraki VPN tunnels bouncing. We recommend that you make changes during a maintenance window to minimize the impact of Non-Meraki VPN tunnels bouncing. "

https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#Non-Meraki_VPN_Peers

AMP
Meraki Employee
Meraki Employee

Hello, Yes this is expected behavior. It is recommended to make changes to the Non Meraki peer settings during a change window

Knowledge is power
Robin777
Conversationalist

@AMP Expected behavior or is not implemented as it could be?
Could this be a nice feature that will make less trouble meraki customers? 🙂

PhilipDAth
Kind of a big deal
Kind of a big deal

In the bottom right-hand corner of the dashboard is a button called "Give your feedback".  That is the best place to request new functionality.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels