ASA to Meraki Migration

[lsantiago]

Hi All, 

I am migrating 4 ASA's to Meraki. 2 MX84 and 2 MX68 for small branches

1. How i can put Meraki side by side so i can slow migrate 

2. vlans living on my 3750 Core how i can advertise "routing, add static route or add vlans?

[PhilipDAth]

Perhaps plug the MX's into the "Link Balancer" and the core switch.  Then just change the routing on your core switches to direct traffic at either the ASA or MX as you desire.

You probably wont want to other with dynamic routing in this case.  Site 1 has a supernet of 192.168.0.0/20 and site 2 has a supernet of 192.168.16.0/21.  You will probably end up with only half a dozen static routes.

[lsantiago]

i have an ELFIQ link balancer ans is not very friendly 

[lsantiago]

whats the proper way to change the gateway

ip default-gateway 192.168.7.X  OR

ip route 0.0.0.0 0.0.0.0 192.168.7.x    

[Adam]

On the MX or on the ASA?  MX is all GUI. 

[lsantiago]

on my 3750 Cisco core to change from one FW to the other 

[PhilipDAth · Accepted solution]

>ip default-gateway 192.168.7.X  OR

>ip route 0.0.0.0 0.0.0.0 192.168.7.x  

If your 3750 is acting as a client, and not doing routing, it should be the first approach.  If the 3750 is being used for layer 3 routing then it should be the second.

Almost certainly you should be using the second approach ("ip route ...). If you change the default gateway you'll need to also remove the original static route on the 3750.

[Adam]

Agreed I usually go the iproute method but you may want to test routing something small first before the default route. 

[Adam]

We did this and had to give the MX an IP in the same VLAN and then gradually switched the L3 routes to point to the MX IP instead of the ASA IP.  

Note MX will need an upstream connection to the internet(s) and a downstream connection to your core switch so the routes can find the MX.  I'm also assuming your L3 routes live on the core switches.  If they live on the ASAs it could make this more complex.  

[lsantiago]

Here is another question. Do i need to create static routes for all my vlans on my Core and spoke locations