- Newest
- Most votes
- Most comments
Hello.
When I Stop my AWS-vMX-HA1 EC2 instance (Offline), I expect my route table to update my Meraki subnets to a new "Target" AWS-vMX-HA2 (or AWS-vMX-HA2's ENI) - this is not working
Reading the documentation it seems this functionality is controlled by Lambda.
So, please check the logs to see if the target Lambda is running and if there are any errors.
The deployment architecture is fault tolerant with two vMX instances in different Availability Zones. An AWS Lambda function handles instance-level failures by checking the state of vMX EC2 instances. For software-level failures, it checks the vMX health state on the Meraki VMX dashboard. In the case of a vMX instance failure, the AWS Lambda function logs the error in CloudWatch and updates the VPC and transit gateway routes to point to a healthy instance.
Hi Riku, I checked Live Trail, and I get do not see any errors. I do see messages below.
"vMX Status: vmx2 online and vmx1 offline, moving all routes to vmx2" "VPC RT Update: Updating VPC route table for vMX2"
From these messages, it appears the Lambda is working, but no changes have been made to my route table that would indicate it is trying to route to vMX2. My route table goes into a "Blackhole"
From what I can see on Meraki's side, the routes transitioned properly to Meraki-vMX-HA2. It looks as if the Lambda function isn't functioning properly(?)
Hi Riku, I have been looking through CloudWatch Live Tail and the logs have not been helpful. Have you implemented the vMX yourself or are you providing general troubleshooting skills?
Relevant content
- asked 10 months ago
- asked 2 years ago
- asked 2 years ago
- asked 10 months ago
- AWS OFFICIALUpdated 8 months ago
- AWS OFFICIALUpdated a year ago
- AWS OFFICIALUpdated a year ago
Thank you for confirmation. Please check the Lambda logs from CloudWatch Logs. If an error occurs in Lambda, you can check the error from the CloudWatch Logs log. https://docs.aws.amazon.com/lambda/latest/dg/monitoring-cloudwatchlogs.html
Since I do not have a license for Meraki vMX, I cannot create the configuration described in the documentation, so I am sharing some general troubleshooting knowledge. Another way to check is when you update the VPC route table, the events "DeleteRoute" and "CreateRoute" are recorded in the CloudTrail event history. First, check whether these events are published to CloudTrail. If an event has been published, check the details to see if there are any errors. https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events-console.html![a](/media/postImages/original/IMpxoMMfw5SqSECJk_QkRMfg)
You can confirm that the event has been issued as follows.