How do I prevent my WAN IP from changing?

Solved
Snika
Getting noticed

How do I prevent my WAN IP from changing?

2024-05-02 18 42 09.png

For example, let's say have a topology like this.

MX is a warm spare.
If MX1 goes down, MX2 will become the primary.
So the WAN link would be 20.20.20.2?

When I am using non meraki vpn and in remote vpn I set vpn peer to 20.20.20.1,
If the WAN link changes to 20.20.20.2, the IPSEC VPN tunnel will go down.
Can the MX keep the WAN IP of 20.20.20.1 with the warm spare setting so that the tunnel does not go down?

1 Accepted Solution
DarrenOC
Kind of a big deal
Kind of a big deal

Good morning @Snika , you need a third IP as part of your HA setup.  When configured for VRRP the third IP will always be the Primary IP address.  So you could have .2 and .3 as the MX IPs and .1 as the VRRP.

Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/

I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.

View solution in original post

2 Replies 2
DarrenOC
Kind of a big deal
Kind of a big deal

Good morning @Snika , you need a third IP as part of your HA setup.  When configured for VRRP the third IP will always be the Primary IP address.  So you could have .2 and .3 as the MX IPs and .1 as the VRRP.

Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/

I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.
DarrenOC
Kind of a big deal
Kind of a big deal

https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair

Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/

I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels