Do any of your new VLAN subnets overlap the current 172.17.5.0/24 subnet? Also, can you successfully PING all of them from the current LAN? ... View more

We've got several AutoVPN sites on DSL/Cable along with several more on enterprise fiber and have seen this same VPN tunnel flapping behavior on occasion.  I've always assumed it was the lifetime timer expiring and tearing down the tunnel due to an absence of interesting traffic, but never examined it any further since it didn't affect operations.     While this may not apply to a Meraki AutoVPN connection, here's a Meraki document on IPSec VPN Lifetime settings that may help out if you've got a connection to a non-Meraki peer.   ... View more

@jared_f wrote: I would look into USB tethering. I believe it was released in iOS 11 last year. This little tidbit was a HUGE help when used in conjunction with @BlakeRichardson's advice above!   We had a managed iPad Pro become disabled by a user entering the wrong lock screen code too many times.  Also rebooted, so it wasn't connected to WiFi.   To add a little more fun into the mix, the device profile also didn't allow pairing with hosts, so it couldn't connect to iTunes nor would a connection to Configurator erase the passcode lock (even though it's the same MacBook used to enroll the iPad into DEP/ABM).   For others who've never had the pleasure of working through this problem, the recovery steps we used were as follows:   Release device from management in Apple Business Manager account. Boot iPad into recovery mode. (not sure that's necessary, but it worked for me.) Connect iPad to MacBook Pro via USB-C to Lightning cable and enable Internet Sharing on MacBook via USB-to-iPad connection. Open Apple Configurator 2 and erase all content & settings of iPad. Again, in AC2, prepare iPad for MDM. Assign iPad to Meraki MDM Server in Apple For Business account. Proceed with set up on iPad and allow it to re-enroll in Meraki SM network. Reassign and push original settings to iPad from Meraki SM Dashboard.     Thanks again for the USB tethering suggestion.  That was the missing link that allowed the iPad to phone home to Apple and get released from management so we could re-image it.   ... View more