How do I prevent my WAN IP from changing?

[Snika]

For example, let's say have a topology like this.

MX is a warm spare.
If MX1 goes down, MX2 will become the primary.
So the WAN link would be 20.20.20.2?

When I am using non meraki vpn and in remote vpn I set vpn peer to 20.20.20.1,
If the WAN link changes to 20.20.20.2, the IPSEC VPN tunnel will go down.
Can the MX keep the WAN IP of 20.20.20.1 with the warm spare setting so that the tunnel does not go down?

[DarrenOC · Accepted solution]

Good morning @Snika , you need a third IP as part of your HA setup.  When configured for VRRP the third IP will always be the Primary IP address.  So you could have .2 and .3 as the MX IPs and .1 as the VRRP.

[DarrenOC]

https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair