Hi NSGuru. Thanks for responding I really appreciate it. We currently only have one site to site VPN and it is a non-Meraki end type. I have sent a reply to PhilipDath with a screen shot of the customised settings on the site to site phase 1 & 2 configs.   On the principle of KISS (Keep It Simple Stupid) I am debating with my AWS expert that we should use the AWS off the shelf product. I think he is coming round to the idea. That way we can run with the Meraki AWS template   Thanks Again. ... View more

I am having the same issues. The "remote none-meraki" VPN need to have the client-van (different subnet) specified. I did it, and it still didn't work.   Seem to work well only Meraki-Meraki AutoVPN.   None meraki peers seem to give problems like what you describe   ... View more

Happened twice more, looks like it is packet loss hitting ~25%. So it must be some threshold for packet loss that is sending the alarm. The ping helped, thanks everyone. ... View more

Hi Jim. I received word back from Meraki support. It transpires that pcaps on site to site VPN are only possible with Meraki Peer to Peer VPNs. They are not possible on non-Meraki peers.   Thanks for your help, it is appreciated.   Cheers.   Mel ... View more

Make sure 192.168.101.0/24 is included in your VPN range on your end.  Make sure the remote end also has this range in your VPN encryption domain.  Make sure AWS has 192.168.101.0/24 in its route table pointing to the VPN appliance.  Make sure the AWS security group is allowing this range. ... View more

Hi Philip. It turned out to be a mis-match  on Phase 1 lifetime settings. The MX end was set at 3600 seconds and the distant end was set at 28800 seconds.   Now that this problem has been resolved I am still at a loss on 2 points.   1. I get very little info from the VPN monitor facility, only a green dot depicting a healthy VPN. There are no stats or other info. Does that info only come with Meraki Auto VPNs ie a Meraki device at both ends. I have glanced at some lierature that refers to VPN registers but again I think this involves Meraki - Meraki VPNs.   2. Having set up a client VPN link for working from home I am trying to get access to the site to site VPN. I initially set up a firewall rule to allow the VPN subnet access to the main subnet. That allowed my PC at home access to every resource within our main office. When I tried adding the subnet at the distant end of the site to site VPN I fail to get access to the resources at the VPN distant end   First setting VPN subnet 192.168.101.0/24 ------------- Main Subnet 192.168.100.0/24  OK   Second Setting 192.168.101.0/24 ------------ 192.168.100.0/24, 172.16.0.0/12 (added distant subnet) : Can still see main subnet but no access to distant subnet.   Any advice ? ... View more