Meraki

steakandeggs

According to the documentation, if the primary tunnel is up but the health check probe fails, it fails over to the secondary tunnel. Can the health check IP be a host inside the tunnel? That seems like the best design.

alemabrahao

For the MX IPSec VPN health check, it is indeed possible and often recommended to use a host inside the tunnel as the health check IP.

Check the documention.

Primary and Secondary IPsec VPN Tunnels - Cisco Meraki Documentation

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

PhilipDAth

I didn't know this feature existed. Cool!

Meraki

Community

Best practice for the IPSec VPN health check host?

Best practice for the IPSec VPN health check host?