VPN connectivity change

[networkninja_]

I am seeing this every time my uplink changes due to connection dropping, I understand the uplink status change but why would the vpn drop as well? if uplink 0 (Primary) is the connection to MPLS, it doesn't create a site to site vpn tunnel.

The only site to site vpn is when using  uplink 1 (Secondary) which is the meraki spoke connection to a MX250 hub

when failing over to the meraki uplink I would expect the vpn to stay up, not go down

[RWelch]

Site-to-Site VPN Troubleshooting 

[RWelch]

Configuring Site-to-site VPN over MPLS 

[AnthonyN · Accepted solution]

Hey there, 

Is your MPLS link your primary or secondary uplink for the MX? And do you have Active-Active Enabled? That may explain the behavior your seeing. 

If you'd like to have a failover scenario, then follow this KB

https://documentation.meraki.com/MX/Deployment_Guides/MPLS_Failover_to_Meraki_Auto_VPN

[networkninja_]

Let me take a look at that KB, as for your questions the MPLS link is the primary and the Active-Active is disabled, should I change it to enable?

[AnthonyN]

If the MPLS is your primary then it is expected behavior for the MX to try and attempt to form a tunnel over it. I don't believe there will be an option  to disable autoVPN tunnel over a Primary uplink. 

You can enable Active-Active to have a "quicker" failover behavior but I'd start with the KB I previously linked 🙂