We have a site-to-site VPN set up between an MX in our main office and a vMX in the AWS cloud. All of our local networks have VPN mode Enabled.  Whenever we make changes to the network on the MX even changes that are not directly related to the site-to-site this banner pops up and requires confirmation of the changes. Additionally, the network connectivity in our main office drops for about 15-30 seconds after the change is made. For instance, today I added client routing IP exemption to the AnyConnect VPN running on the main office MX and after confirming changes, the network dropped.    Everything seems to be functioning as we expect it to i.e traffic is making it where in needs to go but I think this banner makes it pretty clear that something is not right -- and the network drops are obviously very bad.  Does anyone have any thoughts on why this is happening and what we might need to do to fix it?   Thank you! ... View more

We have 2 MX100's (Primary and secondary) and both have been showing the DNS misconfigured alert for about a week. A packet capture shows that DNS requests on both WAN uplinks are not getting responses. We can see them going out but there is never a response back. Most of our internal traffic is routed through a site to site VPN to AWS where it goes out through a firewall. All of these internal VLANs do not have any connectivity problems. Our guest network which does not travel over the site-to-site VPN has been down since the error appeared.    The change log shows no changes at the time that the misconfiguration first occurred.    We have tried changing the DNS servers used on both uplinks with no effect.    Meraki support recommended checking with our ISP to figure out why we are not getting DNS responses. We have done that but they have been less than helpful.    Does anyone have any ideas of what could be going on? Has anyone had experience with an ISP blocking DNS responses?   I am happy to answer any additional questions. Help is greatly appreciated.  ... View more