I kinda gathered that the VRRP process would still be running, because the secondary is still in the configuration.
There does not seem to be a uplink down, BUT, when you look at the eventlog, you can see that it drops all its VPN connections, and then the DREADED : Events where not logged.
This indicate that something definitely has happened.
But I cant see what, this is of course very frustrating for both me and the customer.
Could I get these "dropped" events by setting ip a syslog server ?
The last time I tried that, nothing was registered on the syslog server. 😕