A site-to-site VPN, tested offline before it went live
Connected two sites with an IPsec tunnel on a Cisco router, built and tested offline before it went live.
When an expired certificate took the VPN down
A site-to-site VPN dropped with nothing misconfigured; the certificate behind it had quietly expired.