hello cmr, thanks for your counter questions. I have check in the data what I was able to do. - No firmware update to that time. - No reboot of the MX to this time. - and the change log also shows no relevant changes. But you question about inventory bringt me to an idea. The Spare mashine that was installed in the passt was borrowed from Meraki it self and of cause was sent back to them. So even when the customer did not remove the serialnumber from inventory. In the moment when the serialnumber is added to another organization the serialnumber must disappear from inventory. That would also match to the event-time which was 3:30 am in Germany which could be day light elswer in the world. The question remains whether removing the serial number of the spare machine from the inventory leads to the observed behaviour. This means that the WAN1 address is used for VPN communication instead of the configured VIP address.
... View more