VPN Status Page Shows No Spokes Can Talk To VPN Hubs?

Crocker
A model citizen

VPN Status Page Shows No Spokes Can Talk To VPN Hubs?

Anyone else seeing this, or are we just lucky?

 

We have an alerting script that fires 2x a day, 6 AM and 6 PM, which queries the 

'/organizations/$orgid/appliance/vpn/statuses' endpoint to look for situations where a spoke is online, but cannot reach one or more of our four VPN Hubs (the hubs are Meraki MX450's, most of the spokes are MX67/MX68's). This morning the 6 AM check generated a report listing every. single. one. of our spokes as being unable to reach any of the VPN hubs.
 
To double-check this, I've pulled up the VPN status page at several spokes. Invariably, all of them show uplink decisions as expected, but also show gray for the connection status to all 4 VPN hubs.
 
Our network monitoring system doesn't show any issues reaching any of the spokes, and when I check the 4 VPN hubs I see the expected level of traffic flowing through them. All appears to be working as expected, but the API still claims none of the spokes can reach any of the hubs, and the VPN status pages all show the same.
 
I opened a ticket with support, who mentioned this is a known issue, but from our conversation it sounded like there is/was a known issue with a previous version of the MX software that could generate this problem.
 
The VPN hubs are all on 18.211.2. Most of the spokes are on 18.211.2 or 18.211. I have a test spoke that's on 19.1.6 that also shows the same issue.
3 Replies 3
Mloraditch
Head in the Cloud

I just checked a random sampling of orgs I have access to and don't see the issue but I don't have too many clients still on the firmware level you are on.

If you found this post helpful, please give it Kudos. If my answer solves your problem please click Accept as Solution so others can benefit from it.
PhilipDAth
Kind of a big deal
Kind of a big deal

The current stable version is 18.211.5.1.

 

From the release notes for 18.211.5:

Executive summary

  • This is a maintenance release for MX 18.211 containing only bug fixes.
  • The fixes are mostly focused on resolving rare, but potentially disruptive issues that could be encountered while using VPN (AutoVPN, Non-Meraki site-to-site VPN, and Client VPN).
Ryan_Miles
Meraki Employee
Meraki Employee

I too checked many Orgs on many shards and not seeing the issue. If you still are seeing this I would contact Support ASAP.

Get notified when there are additional replies to this discussion.