Azure VMX site to site VPN Hubs Resiliency

[workmen]

HI All, 

Our company has 2 Azure VMX hubs for NALA Region. One of the hubs went down affecting only our Canada sites. My understanding is that it should fail over to the other VMX hub but unfortunately it didn't that is why our site Canada has been down for two hours. I checked with https://downdetector.ca/ and there is indeed a downtime occurred on Azure Canada. Is there any additional configuration needed for it to failover to the other hub?

Thanks

[RWelch · Accepted solution]

Would the HA vMX offer the failover you are seeking? 

Deploying Highly Available vMX in Azure 

In order to provide High Availability for vMXs in Azure, Azure functions can be utilized to facilitate automatic failover between a primary and standby vMX. User-defined routes (UDRs) are utilized to override the Azure default system routes by directing traffic to the active vMX in an active-passive pair. If the active vMX fails, the Azure route table changes the next hop to the secondary vMX. 

For deploying vMX Network Virtual Appliances from the Azure marketplace, please reference our vMX Setup Guide for Microsoft Azure.

[PhilipDAth]

You need to do what @RWelch said or use the more modern BGP method.

https://documentation.meraki.com/MX/Deployment_Guides/vMX_and_Azure_Route_Server

More than likely, there is something wrong with your failover configuration.