Symptom

cEdge looses control connections after vManage pushes new enterprise wan edge cert to cEdge. The new certificate is installed and old certificate is removed but cEdge looks to still be attempting to use old certificate to form control connections. Executing a "clear sdwan control connections" causes the cEdge to use new certificate and control connections are reestablished. A "clear sdwan control connections" command should not be required on the cEdge

Conditions

cEdge looses control connections after vManage pushes new enterprise wan edge cert to cEdge. The new certificate is installed and old certificate is removed but cEdge looks to still be attempting to use old certificate to form control connections. Executing a "clear sdwan control connections" causes the cEdge to use new certificate and control connections are reestablished. A "clear sdwan control connections" command should not be required on the cEdge

Workaround

Use dtls as vManage security control protocol

Further Problem Description