The office internet drops. The backup router connects, public websites open, but staff still cannot reach the firm's private document system through the VPN. For a small law office, the interruption is about access to client work, not whether a signal light is green.
Treat this as three separate questions: did the office switch connections, did the VPN establish a usable session, and can the intended application be reached? A successful result at one layer does not answer the next.
Identify which VPN path has failed
First, ask where the affected person is working. Is an employee inside the office using a VPN client to reach a hosted system? Is the office router maintaining a tunnel to another location? Or is someone at home trying to connect into the office?
Those are different paths. A cellular connection that carries outbound office browsing is not proof that an inbound connection to the office remains available.
Record the VPN product, the exact error without credentials, the time the problem started, and whether one or several staff members are affected. Avoid changing router settings while the path is still unclear.
Check what the E400 indicators actually tell you
If the firm uses an Ericsson Cradlepoint E400, separate the modem and management indicators. Ericsson introduced the E400 in April 2025, and its product documentation describes wired and cellular deployment options, including cellular failover.
The official E400 guide describes solid green on the embedded modem indicator as an active connection. A solid white NetCloud Manager indicator means the device is connected to NetCloud Manager. Neither indicator proves that a laptop's VPN or private document system is working.
Ask the administrator which device actually establishes the tunnel: the router, a separate firewall, or the employee's laptop. Check that tunnel's status and logs rather than treating router connectivity as an application test. Use the guide for the exact model and configuration.
Use NetCloud to confirm the connection change
For a configured Ericsson Cradlepoint deployment, an authorized administrator can use Connection Manager to check the WAN source. NetCloud's documented failover testing workflow also points administrators to the router's Health > Failover Events view.
Compare the event time with the time staff lost access. NetCloud's failover records describe the connection transition; they do not certify that every application resumed. Available reporting also depends on the deployment and configuration.
Keep the findings simple: which WAN was active, when it changed, and whether the VPN problem began at the same time. That is more useful than a screenshot of signal bars alone.
Compare browsing, the VPN session and private access
Use an approved device and a harmless test file or test destination. Do not put client documents into a troubleshooting experiment.
Check : What the observation helps distinguish
A public website opens : Basic internet access is available for that test
A new VPN connection succeeds : The client can establish a session under the current conditions
The approved private test destination opens : Access through the tunnel works for that destination
The required document application works : The application workflow has also been checked
If a session dropped during the switch, ask the employee to reconnect using the firm's normal approved process. If a fresh connection still fails, save the error and stop repeated attempts that may trigger account lockouts.
Have the VPN administrator review the logs and the differences between the primary and backup paths. Depending on the design, relevant questions can include addressing, remote-end restrictions, name resolution, routing, and the VPN transport. These are investigation questions, not a diagnosis from the symptom alone.
Do not disable MFA, turn off firewall protection, or expose a file server to restore access quickly. Any configuration change should be authorized, documented and reversible.
Test the work the firm needs to finish
During an agreed maintenance window, test both a new VPN session and a session already running when the connection changes. Then test the return to primary service. Record what needs manual reconnection and who is responsible.
Start with the existing backup-internet test checklist, then add the firm's specific remote-access and document workflows. This makes the acceptance test concrete: an approved staff member can reach the agreed test resource over backup, and the office can return to primary service safely.
Get help with the failing path
Full Metal Architect provides business internet and failover support for Maryland professional firms and other small businesses. Get IT Help with the router model, VPN product, number of affected users and whether ordinary browsing works on backup. Keep credentials, full network logs and confidential client information out of the contact form.
FMA will discuss the approach, scope and cost before paid work begins. No managed IT contract is required. Equipment, licensing, provider access and VPN-administrator coordination are reviewed as part of the work.
Official references
• Ericsson Cradlepoint: Overview of Failover and Failback
• Ericsson Cradlepoint: E400 indicator guide
• Ericsson: E400 announcement, April 9, 2025
• Ericsson Cradlepoint: E400 product details
• Ericsson Cradlepoint: Manual failover testing and NetCloud checks
• Ericsson Cradlepoint: Failover Events
Documentation checked October 30, 2026. Product features depend on supported equipment, software, configuration and applicable services. No vendor partnership, guaranteed continuity, or compliance outcome is asserted.
