Operational Runbook

Day-2 checks

• IPsec SAs up, DPD stable
• BGP adjacencies (if used) established
• Uptime/health alerts clean

Common tasks

• Rotate pre-shared keys (PSKs)
• Add a new branch tunnel
• Update UDRs and validate effective routes

Change control checklist

• Impact analysis
• Backout plan
• Test plan and success criteria