I think it was related to the AT&T users cell phone hot spot. He went home and it worked via his home network. Good luck ... View more

Yes I tried that, I also tried the powershell script that was recomended to setup a new connection and use the rasphone.exe. This is what I see in the Meraki log: Mar 11 14:34:51 Non-Meraki / Client VPN negotiation msg: IPsec-SA expired: ESP/Transport XX.XX.XXX.XXX[4500]->XXX.XXX.XXX.XX[4500] spi=701187524(0x29cb45c4) Mar 11 14:34:51 Non-Meraki / Client VPN negotiation msg: IPsec-SA expired: ESP/Transport XXX.XXX.XXX.XX[4500]->XX.XX.XXX.XXX[4500] spi=198789719(0xbd94a57)   And this is what I see on the client event log: Log Name: Application Source: RasClient Date: 3/11/2020 5:09:45 PM Event ID: 20227 Task Category: None Level: Error Keywords: Classic User: N/A Computer: User.DOMAIN.local Description: CoId={860C671C-A117-4ACC-B085-3FE31742860C}: The user DOMAIN\User dialed a connection named DOMAIN VPN which has failed. The error code returned on failure is 1168. ... View more